Home Malware Programs Adware MediaTicket

MediaTicket

Posted: March 28, 2006

MediaTicket is an adware spyware that continuously shows unexpected commercial pop-up advertisements. The threat also affects Internet Explorer security by changing its Internet zone settings. MediaTicket can be manually installed or may get into the computer along with some ad-supported software. It automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 arsetup.exe
    2 installer.exe
    3 mediaticketsinstaller.ocx
    4 mt-uninstaller.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREClassesMEDIATICKETSINSTALLER.MediaTicketsInstallerCtrl.1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionModuleUsage\%Windir%/DownloadedProgramFiles/MediaTicketsInstaller.ocxHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmsnmessangerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunproproegrun
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}5530D356-0063-41B9-B20D-E9D799E8D9074781DAA6-4DE5-47A1-B02A-945F0D017A9E3517FB25-305D-4012-B531-186E3851E7ED9EB320CE-BE1D-4304-A081-4B4665414BEF39DA2444-065F-47CB-B27C-CCB1A39C06B7

Related Posts

Loading...