MediaPass
MediaPass is a quite simple, but effective adware application. It starts automatically on every PC startup and secretly runs in background. It monitors user Internet activity, sends gathered data to its home servers, receives and shows annoying advertisements and other commercial information. MediaPass can be downloaded from www.windupdates.com. Do not install this application!
File System Modifications
- The following files were created in the system:
# File Name 1 78786.exe 2 ad.exe 3 ada.exe 4 as0.exe 5 g1.exe 6 k.exe 7 mediaacck.exe 8 mediaaccx.dll 9 mediaacess.exe 10 mediapass.exe 11 mediapassc.dll 12 mediapassk.exe 13 mediapassk[1].exe 14 mediapassx.dll 15 nlsfuncs2.exe 16 openconf2.exe 17 qh4mkbv9.dll 18 razin.exe 19 rm05040901.stub.exe 20 saupdater2.exe 21 veritas.exe 22 xo.exe
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\interface\{00ada225-ea6c-4fb3-82e8-68189201ccb9}HKEY_CLASSES_ROOT\mediapass.installer\curver\mediapass.installerHKEY_CLASSES_ROOT\mediapass.installer\installer classHKEY_CLASSES_ROOT\typelib\{15696ae2-6ea4-47f4-bea6-a3d32693efc7}
I'm amazed at how the scanner detected this crap. thankfully it is gone now.