|
|
| AdWare DownloadWare MediaLoads
|
|
AdWare DownloadWare, MediaLoads, activeinstall2.dll, MovieNetworks1.exe, ClipGenie
MediaLoads ist eine Browser Helper Object (BHO) Plugin-DLL für den Microsoft Internet Explorer, die Werbung anzeigt, wenn der Browser aktiv ist.
Hijackthis
O2 - BHO: MediaLoads Enhanced - {85A702BA-EA8F-4B83-AA07-07A5186ACD7E} - C:\Programme\MediaLoads Enhanced\ME2.DLL
O2 - BHO: MediaLoads Enhanced - {85A702BA-EA8F-4B83-AA07-07A5186ACD7E} - C:\PROGRAMME\MEDIALOADS ENHANCED\ME1.DLL
O4 - HKLM\..\Run: [MediaLoads Installer] "C:\Programme\DownloadWare\dw.exe" /H
Avenger
Registry values to delete:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MediaLoads Installer
registry keys to delete:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MEDIALOADS INSTALLER
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaLoads Enhanced
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaLoads
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{85A702BA-EA8F-4B83-AA07-07A5186ACD7E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{85A702BA-EA8F-4B83-AA07-07A5186ACD7E}
HKEY_LOCAL_MACHINE\SOFTWARE\DOWNLOADWARE
Files to delete:
%windir%\Digital Signature 20050119.htm
%windir%\Digital Signature 20030718.htm
%windir%\Digital Signature 20040412.htm
%windir%\Digital Signature 20040822.htm
%windir%\Downloaded Program Files\MovieNetworks1.exe
%windir%\Downloaded Program Files\activeinstall2.dll
Folders to delete:
C:\Programme\Enhanced MediaLoads
C:\Programme\Enhanced search
C:\Programme\MediaLoads
C:\Programme\MediaLoads Installer
C:\Programme\medch
C:\Programme\DownloadWare
%windir%\system32\drvi
%windir%\Temp\Adware
C:\Programme\DelFin Media Viewer
|
C:\PROGRAMME\DOWNLOADWARE\Cfg\1013.pid
C:\PROGRAMME\DOWNLOADWARE\Cfg\51.dl
C:\PROGRAMME\DOWNLOADWARE\Cfg\90.dl
C:\PROGRAMME\DOWNLOADWARE\Cfg\global.cfg
C:\PROGRAMME\DOWNLOADWARE\Cfg\status.cfg
C:\PROGRAMME\DOWNLOADWARE\Cfg\user.cfg
C:\PROGRAMME\DOWNLOADWARE
C:\PROGRAMME\DOWNLOADWARE\CFG
C:\PROGRAMME\DOWNLOADWARE\DOWNLOADS
C:\PROGRAMME\DOWNLOADWARE\TEMP
C:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\bikpreview.wmv
C:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon.gif
C:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon_new.gif
Adware:Adware/DownloadWare C:\WINDOWS\system32\drvi\ynngjubbdm.exe
Adware:adware/downloadware c:\windows\Digital Signature 20050119.htm
Adware:adware/downloadware C:\WINNT\Digital Signature 20030718.htm
Adware:adware/downloadware C:\WINDOWS\Digital Signature 20040412.htm
Adware:adware/downloadware C:\WINDOWS\Digital Signature 20040822.htm
Adware:Adware/DownloadWare C:\WINDOWS\Temp\nst10.EXE
Adware:Adware/DownloadWare C:\Documents and Settings\Lullas\Local Settings\Temp\nstC.EXE
Adware:Adware/DownloadWare C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\OPQRSTUV\1[1].txt
Adware:Adware/DownloadWare C:\Program Files\MediaLoads\notify\notify.exe
Adware:Adware/Medload C:\Program Files\MediaLoads\v1\ML.exe
C:\Programme\MediaLoads\v1\ML.exe AdWare.DownloadWare"
Adware:Adware/DownloadWare C:\\Archivos de Programa\\MediaLoads*
Adware:Adware/Medload C:\\Archivos de programa\\MediaLoads\\v1\\ML.exe
Adware:adware/downloadware C:\PROGRAMME\MLH
Adware:Adware/DownloadWare C:\WINDOWS.0\Temp\Adware\WebInstall.exe
Adware:Adware/DownloadWare C:\WINDOWS\apihh32.dll
Adware:Adware/DownloadWare C:\WINDOWS\apphv32.dll
Adware:Adware/DownloadWare C:\WINDOWS\netxl.dll
Adware:Adware/DownloadWare C:\WINDOWS\ntee.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\crgr32.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\crxp.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\d3ym32.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\mfcjk32.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\winli.dll
Adware:Adware/DownloadWare C:\WINDOWS\syswc32.dll
DownloadWare Adware "C:\Program Files\medch"
C:\Programme\DownloadWare\Temp\ml.exe tagged as "not-a-virus:AdWare.DownloadWare"
C:\Programme\MediaLoads\notify\notify.exe tagged as "not-a-virus:AdWare.DownloadWare"
C:\Programme\MediaLoads\v1\ML.exe tagged as "not-a-virus:AdWare.DownloadWare"
C:\Programme\MediaLoads Enhanced\ME1.DLL
C:\WINDOWS\Downloaded Program Files\MovieNetworks1.exe -> AdWare.DownloadWare"
Spyware:application/bestoffer C:\WINNT\smdat32a.sys
Adware.SBSoft C:\WINDOWS\Downloaded Program Files\webdlg32.dll
Registry
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaLoads Enhanced
HKU\S-1-5-21-602162358-1606980848-854245398-1004\software\medialoads
HKEY_CURRENT_USER\software\medialoads
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DownloadWare
C:\PROGRAMME\MEDIALOADS\V1\ML.EXE
c:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\bikpreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\casino\gui\casinopreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\casino\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\casino\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\celebs\gui\celebpreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\celebs\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\celebs\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\comingsoon\gui\mid.gif
c:\Programme\MediaLoads\medialoads\media\channels\extreme\gui\extpreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\extreme\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\extreme\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\groovy\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\groovy\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\weird\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\weird\gui\wrdpreview.wmv
c:\Programme\MediaLoads\medialoads\media\gui\player\f1_2b_categories.html
c:\Programme\MediaLoads\medialoads\media\gui\player\player.html
c:\Programme\MediaLoads\medialoads\media\gui\player\playerslices.htm
c:\Programme\MediaLoads\medialoads\media\gui\player\scroller.swf
BrilliantDigital Adware
C:\WINDOWS\BDE\BDEEngine2.dll
C:\WINDOWS\BDE\bdeimage.dll
C:\WINDOWS\BDE\Cache\b3d.b3d
C:\WINDOWS\BDE\Cache\installb3d3105.cab
C:\WINDOWS\BDE\Cache\installb3dplayer3101.cab
C:\WINDOWS\system32\bdedata2.dll
C:\WINDOWS\system32\bdedownloader.dll
C:\WINDOWS\system32\bdesecureinstall.cab
HKEY_LOCAL_MACHINE\SOFTWARE\BRILLIANT DIGITAL ENTERTAINMENT
HKEY_LOCAL_MACHINE\Software\Classes\B3DS_AUTO_FILE
HKEY_LOCAL_MACHINE\Software\Classes\BDESMARTINSTALLER25.BDESMARTINSTALLER25
HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{67925164-C4B6-11D2-B9C6-0000E84F59A6}
HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{82FC7881-AACC-11D2-B9C6-0000E842E40A}
|
|
