Home Malware Programs Trojans MediaCodec

MediaCodec

Posted: May 30, 2006

Threat Metric

Threat Level: 9/10
Infected PCs: 44
First Seen: July 24, 2009
Last Seen: December 26, 2021
OS(es) Affected: Windows

MediaCodec is a trojan that may install rogue security programs without user consent. MediaCodec appears as a needed codec or upgrade to Windows Media Player when the user attempts to watch certain adult/porn videos only to trick the user into downloading it. Once downloaded, it contacts remote servers and starts the download of rogue security software such as SpywareQuake.

MediaCodec

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



pmuninst.exe File name: pmuninst.exe
Size: 10.24 KB (10240 bytes)
MD5: 6bccfbe3350a3613f51a35f36f8d2dfa
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
gqagksr.dll File name: gqagksr.dll
Size: 147.45 KB (147456 bytes)
MD5: 20f8a857545645139d41afa1cf5c36a4
Detection count: 8
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009

Registry Modifications

The following newly produced Registry Values are:

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Media-Codec

Additional Information

The following cookies were detected:
icodecpacksoftcodec

Related Posts

2 Comments

  • Geeta says:

    i have a STOPzilla installed on my computer which detects spyware....it found the MediaCodec trojan on my computer (I also have Norton Anti-virus installed on my computer which does not detect the trojan). My problem: I followed ur steps (add/remove program...registry find...taskbar) and i can NOT find the trojan anywhere. Any help will be appreciated..I must say that i love this site and all the information it gives out to everyone. I have saved it under "My Favorite Links"

  • ghostrider01 says:

    Geeta,

    What are the names of the infected files that Stopzilla catches on your computer? Do you get pop-ups or maybe there are any new toolbars? Please be more specific.

Loading...