Media Finder

Posted: November 12, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	12,223
Threat Level:	2/10
Infected PCs:	76,273

First Seen:	March 20, 2012
Last Seen:	March 5, 2025
OS(es) Affected:	Windows

Media Finder is a Potentially Unwanted Program that leverages a range of mildly malicious functions while Media Finder also helps you with finding audio and video files online. Most often acquired from installing software from free movie or music-related sites, Media Finder monitors your web-browsing habits, uses HTML injection techniques to alter the web pages that you view and may redirect your browser to its own site without your consent. Because Media Finder has shown signs of resisting normal removal methods, anti-malware programs may be required to delete a Media Finder infection without any undesirable side effects.

The Things that Media Finder Finds without the Right to Do So

Media Finder acts as a media-oriented search engine and download manager for movies, music and other popular media files. Although Media Finder does perform the functions that Media Finder claims to possess, SpywareRemove.com malware research team also has spotted some secondary functions from Media Finder that aren't intended for the benefit of your PC. Symptoms of Media Finder being on your computer can include:

Unusual pop-up messages.
Web pages that have had third party content (such as advertisements or links to Media Finder) injected into them by Media Finder.
Changes to your web browser's settings that reduce your web-browsing security.
Redirects to Media Finder when you attempt to navigate to other sites.
Web-browsing activities (such as which sites you visit) that are monitored without your consent.
Poor system performance due to the resources that Media Finder expends in monitoring your web-browsing activities.

SpywareRemove.com malware experts also warn that Media Finder isn't likely to have the security features that most search-based utilities and sites use to protect their users from hazardous sites and/or files.

How to Find Your Media without Finding Media Finder in Your Way

Media Finder usually is involved with free download sites that offer popular movies and other highly-wanted types of media. In most cases, avoiding suspicious sites like these can help to block major routes of Media Finder attacks. Downloads that occur without permission – although rare – remain a possibility for Media Finder and similar PUPs, and you also should keep appropriate browser security at hand to guard against drive-by-download exploits, Trojan droppers and similar malware-installing attacks.

If you need to remove Media Finder, SpywareRemove.com malware experts don't recommend that you try to do through the Control Panel or other methods common for removing software. Media Finder has shown a tendency to resist typical deletion techniques and an incomplete deletion of Media Finder can cause other malfunctions for the compromised PC. However, any anti-malware product that has the necessary features for dealing with browser hijackers, adware or PUPs should be able to delete Media Finder without any major problems arising.

Aliases

Application.Win32.AdWare.MFinder.AS [Comodo]Gen:Variant.Application.MediaFinder.1 [BitDefender]Win32:TheMediaFinder-C [PUP] [Avast]a variant of Win32/Adware.MediaFinder.C [NOD32]Win32:TheMediaFinder-B [PUP] [Avast]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%PROGRAMFILES%\media finder\media finder.exe

File name: media finder.exe
Size: 9.17 MB (9177600 bytes)
MD5: ac0a3a071f76c50c7174e4312fff2557
Detection count: 5,047
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\media finder\media finder.exe
Group: Malware file
Last Updated: January 11, 2022

C:\System Volume Information\_restore{6E290A8D-2810-4153-833C-66DB947CE2E7}\RP79\A0074994.exe

File name: A0074994.exe
Size: 8.58 MB (8587776 bytes)
MD5: 619e9d253bf7d347b753d4d58f256e02
Detection count: 841
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{6E290A8D-2810-4153-833C-66DB947CE2E7}\RP79\A0074994.exe
Group: Malware file
Last Updated: May 8, 2022

C:\Users\<username>\AppData\Roaming\Media Finder\Extensions\IEPlugin64.dll

File name: IEPlugin64.dll
Size: 420.99 KB (420992 bytes)
MD5: 60891d9f4777ad695cf2899d1363776b
Detection count: 778
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Users\<username>\AppData\Roaming\Media Finder\Extensions\IEPlugin64.dll
Group: Malware file
Last Updated: October 13, 2022

%APPDATA%\Media Finder\Extensions\gencrawler_gc.dll

File name: gencrawler_gc.dll
Size: 437.37 KB (437376 bytes)
MD5: dc0cae63fcc1eece42902808f64c5846
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\Media Finder\Extensions
Group: Malware file
Last Updated: May 2, 2014

%SystemDrive%\Users\<username>\AppData\Roaming\Media Finder\Extensions\IEPlugin32.dll

File name: IEPlugin32.dll
Size: 307.2 KB (307200 bytes)
MD5: 4eb6fca84d038b64a0b8b4ba644eaa9a
Detection count: 4
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming\Media Finder\Extensions
Group: Malware file
Last Updated: March 25, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{3F39D17D-50C7-4AC4-A63A-CDF6CDBD0C61}{71E3A30E-9444-49D9-ABDB-B4B531D0BBA3}{AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2}{AE9908C1-3400-4B10-9061-C6C04D96E3D2}HKEY..\..\..\..{RegistryKeys}Software\MediaFinderSoftware\Microsoft\Internet Explorer\MenuExt\Download with &Media FinderSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2}SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Users\user\AppData\Roaming\Media Finder\Extensions\IEPlugin64.dllSoftware\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Users\user\AppData\Roaming\Media Finder\Extensions\IEPlugin64.dllHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{6DA399FC-350F-41AC-8CA6-B9F8496753BE}_is1

Additional Information

The following directories were created:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Media Finder%APPDATA%\Media Downloader%APPDATA%\Media Finder%AppData%\Microsoft\Windows\Start Menu\Programs\Media Finder%PROGRAMFILES%\Media Finder%PROGRAMFILES(X86)%\Media Finder