AdWare DownloadWare - MediaLoads

AdWare DownloadWare - MediaLoads

MediaLoads ist eine Browser Helper Object (BHO) Plugin-DLL für den Microsoft Internet Explorer, die Werbung anzeigt, wenn der Browser aktiv ist.

Hijackthis

O2 - BHO: MediaLoads Enhanced - {85A702BA-EA8F-4B83-AA07-07A5186ACD7E} - C:\Programme\MediaLoads Enhanced\ME2.DLL

O2 - BHO: MediaLoads Enhanced - {85A702BA-EA8F-4B83-AA07-07A5186ACD7E} - C:\PROGRAMME\MEDIALOADS ENHANCED\ME1.DLL

O4 - HKLM\..\Run: [MediaLoads Installer] "C:\Programme\DownloadWare\dw.exe" /H

Avenger / Beispiel

Registry values to delete: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MediaLoads Installer registry keys to delete: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MEDIALOADS INSTALLER HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaLoads Enhanced HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaLoads HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{85A702BA-EA8F-4B83-AA07-07A5186ACD7E} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{85A702BA-EA8F-4B83-AA07-07A5186ACD7E} HKEY_LOCAL_MACHINE\SOFTWARE\DOWNLOADWARE Files to delete: %windir%\Digital Signature 20050119.htm %windir%\Digital Signature 20030718.htm %windir%\Digital Signature 20040412.htm %windir%\Digital Signature 20040822.htm %windir%\Downloaded Program Files\MovieNetworks1.exe %windir%\Downloaded Program Files\activeinstall2.dll Folders to delete: C:\Programme\Enhanced MediaLoads C:\Programme\Enhanced search C:\Programme\MediaLoads C:\Programme\MediaLoads Installer C:\Programme\medch C:\Programme\DownloadWare %windir%\system32\drvi %windir%\Temp\Adware C:\Programme\DelFin Media Viewer

C:\PROGRAMME\DOWNLOADWARE\Cfg\1013.pid
C:\PROGRAMME\DOWNLOADWARE\Cfg\51.dl
C:\PROGRAMME\DOWNLOADWARE\Cfg\90.dl
C:\PROGRAMME\DOWNLOADWARE\Cfg\global.cfg
C:\PROGRAMME\DOWNLOADWARE\Cfg\status.cfg
C:\PROGRAMME\DOWNLOADWARE\Cfg\user.cfg
C:\PROGRAMME\DOWNLOADWARE
C:\PROGRAMME\DOWNLOADWARE\CFG
C:\PROGRAMME\DOWNLOADWARE\DOWNLOADS
C:\PROGRAMME\DOWNLOADWARE\TEMP

C:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\bikpreview.wmv
C:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon.gif
C:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon_new.gif

Adware:Adware/DownloadWare C:\WINDOWS\system32\drvi\ynngjubbdm.exe
Adware:adware/downloadware c:\windows\Digital Signature 20050119.htm
Adware:adware/downloadware C:\WINNT\Digital Signature 20030718.htm
Adware:adware/downloadware C:\WINDOWS\Digital Signature 20040412.htm
Adware:adware/downloadware C:\WINDOWS\Digital Signature 20040822.htm
Adware:Adware/DownloadWare C:\WINDOWS\Temp\nst10.EXE
Adware:Adware/DownloadWare C:\Documents and Settings\Lullas\Local Settings\Temp\nstC.EXE
Adware:Adware/DownloadWare C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\OPQRSTUV\1[1].txt
Adware:Adware/DownloadWare C:\Program Files\MediaLoads\notify\notify.exe
Adware:Adware/Medload C:\Program Files\MediaLoads\v1\ML.exe
C:\Programme\MediaLoads\v1\ML.exe AdWare.DownloadWare"

Adware:Adware/DownloadWare C:\\Archivos de Programa\\MediaLoads*
Adware:Adware/Medload C:\\Archivos de programa\\MediaLoads\\v1\\ML.exe
Adware:adware/downloadware C:\PROGRAMME\MLH

Adware:Adware/DownloadWare C:\WINDOWS.0\Temp\Adware\WebInstall.exe
Adware:Adware/DownloadWare C:\WINDOWS\apihh32.dll
Adware:Adware/DownloadWare C:\WINDOWS\apphv32.dll
Adware:Adware/DownloadWare C:\WINDOWS\netxl.dll
Adware:Adware/DownloadWare C:\WINDOWS\ntee.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\crgr32.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\crxp.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\d3ym32.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\mfcjk32.dll
Adware:Adware/DownloadWare C:\WINDOWS\system32\winli.dll
Adware:Adware/DownloadWare C:\WINDOWS\syswc32.dll
DownloadWare Adware "C:\Program Files\medch"

C:\Programme\DownloadWare\Temp\ml.exe tagged as "not-a-virus:AdWare.DownloadWare"
C:\Programme\MediaLoads\notify\notify.exe tagged as "not-a-virus:AdWare.DownloadWare"
C:\Programme\MediaLoads\v1\ML.exe tagged as "not-a-virus:AdWare.DownloadWare"
C:\Programme\MediaLoads Enhanced\ME1.DLL
C:\WINDOWS\Downloaded Program Files\MovieNetworks1.exe -> AdWare.DownloadWare"

Spyware:application/bestoffer C:\WINNT\smdat32a.sys
Adware.SBSoft C:\WINDOWS\Downloaded Program Files\webdlg32.dll

Registry - MediaLoads

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaLoads Enhanced
HKU\S-1-5-21-602162358-1606980848-854245398-1004\software\medialoads
HKEY_CURRENT_USER\software\medialoads
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DownloadWare

Programme - MediaLoads

C:\PROGRAMME\MEDIALOADS\V1\ML.EXE
c:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\bikpreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\bikini\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\casino\gui\casinopreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\casino\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\casino\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\celebs\gui\celebpreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\celebs\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\celebs\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\comingsoon\gui\mid.gif
c:\Programme\MediaLoads\medialoads\media\channels\extreme\gui\extpreview.wmv
c:\Programme\MediaLoads\medialoads\media\channels\extreme\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\extreme\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\groovy\gui\icon.gif
c:\Programme\MediaLoads\medialoads\media\channels\groovy\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\weird\gui\icon_new.gif
c:\Programme\MediaLoads\medialoads\media\channels\weird\gui\wrdpreview.wmv
c:\Programme\MediaLoads\medialoads\media\gui\player\f1_2b_categories.html
c:\Programme\MediaLoads\medialoads\media\gui\player\player.html
c:\Programme\MediaLoads\medialoads\media\gui\player\playerslices.htm
c:\Programme\MediaLoads\medialoads\media\gui\player\scroller.swf

BrilliantDigital Adware

C:\WINDOWS\BDE\BDEEngine2.dll
C:\WINDOWS\BDE\bdeimage.dll
C:\WINDOWS\BDE\Cache\b3d.b3d
C:\WINDOWS\BDE\Cache\installb3d3105.cab
C:\WINDOWS\BDE\Cache\installb3dplayer3101.cab
C:\WINDOWS\system32\bdedata2.dll
C:\WINDOWS\system32\bdedownloader.dll
C:\WINDOWS\system32\bdesecureinstall.cab

HKEY_LOCAL_MACHINE\SOFTWARE\BRILLIANT DIGITAL ENTERTAINMENT
HKEY_LOCAL_MACHINE\Software\Classes\B3DS_AUTO_FILE
HKEY_LOCAL_MACHINE\Software\Classes\BDESMARTINSTALLER25.BDESMARTINSTALLER25
HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{67925164-C4B6-11D2-B9C6-0000E84F59A6}
HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{82FC7881-AACC-11D2-B9C6-0000E842E40A}

---

---

Counter-Box.de