Home Malware Programs Adware MediaPass

MediaPass

Posted: March 28, 2006

MediaPass is a quite simple, but effective adware application. It starts automatically on every PC startup and secretly runs in background. It monitors user Internet activity, sends gathered data to its home servers, receives and shows annoying advertisements and other commercial information. MediaPass can be downloaded from www.windupdates.com. Do not install this application!

File System Modifications

  • The following files were created in the system:
    # File Name
    1 78786.exe
    2 ad.exe
    3 ada.exe
    4 as0.exe
    5 g1.exe
    6 k.exe
    7 mediaacck.exe
    8 mediaaccx.dll
    9 mediaacess.exe
    10 mediapass.exe
    11 mediapassc.dll
    12 mediapassk.exe
    13 mediapassk[1].exe
    14 mediapassx.dll
    15 nlsfuncs2.exe
    16 openconf2.exe
    17 qh4mkbv9.dll
    18 razin.exe
    19 rm05040901.stub.exe
    20 saupdater2.exe
    21 veritas.exe
    22 xo.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\interface\{00ada225-ea6c-4fb3-82e8-68189201ccb9}HKEY_CLASSES_ROOT\mediapass.installer\curver\mediapass.installerHKEY_CLASSES_ROOT\mediapass.installer\installer classHKEY_CLASSES_ROOT\typelib\{15696ae2-6ea4-47f4-bea6-a3d32693efc7}

One Comment

Loading...