PCの修理が必要ですか?
専門家に頼む
Nume:ADWARE/MediaGet.I
Descoperit pe data de:08/10/2012
Tip:Adware
ITW:Da
Numar infectii raportate:Mediu
Potential de raspandire:Scazut
Potential de distrugere:Scazut
Fisier static:Nu
Versiune VDF:7.11.45.118 - luni, 8 octombrie 2012
Versiune IVDF:7.11.45.118 - luni, 8 octombrie 2012

 General Metoda de raspandire:
   • Nu are rutina proprie de raspandire


Alias:
   •  Eset: probably a variant of Win32/MediaGet application
     Authentium: W32/MediaGet.A.gen!Eldorado


Sistem de operare:
   • Windows 2000
   • Windows XP
   • Windows 2003
    Windows Vista
    Windows Server 2008
    Windows 7


Imediat dupa lansarea in executie, pe ecran este afisat:


 Fisiere  Creeaza urmatoarele directoare:
   • %HOME%\Local Settings\Application Data\MediaGet2\imageformats
   • %HOME%\Local Settings\Application Data\MediaGet2\
   • %HOME%\Local Settings\Application Data\MediaGet2\Firefox
   • %HOME%\Local Settings\Application Data\MediaGet2\Firefox\chrome\content
   • %HOME%\Local Settings\Application Data\MediaGet2\Firefox\components



Sunt create fisierele:

%HOME%\Local Settings\Application Data\MediaGet2\Firefox\components\mg_ffext.dll
%HOME%\Local Settings\Application Data\MediaGet2\Firefox\components\img_ffext.xpt
%HOME%\Local Settings\Application Data\MediaGet2\Firefox\chrome\content\mg_ffext.xul
%HOME%\Local Settings\Application Data\MediaGet2\Firefox\chrome\content\mg_ffext.js
%HOME%\Local Settings\Application Data\MediaGet2\Firefox\install.rdf
%HOME%\Local Settings\Application Data\MediaGet2\Firefox\chrome.manifest
%HOME%\Local Settings\Application Data\MediaGet2\imageformats\qmng4.dll
%HOME%\Local Settings\Application Data\MediaGet2\imageformats\qmng4.dll
%HOME%\Local Settings\Application Data\MediaGet2\imageformats\qjpeg4.dll
%HOME%\Local Settings\Application Data\MediaGet2\imageformats\qgif4.dll
%HOME%\Local Settings\Application Data\MediaGet2\ssleay32.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtXmlPatterns4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtXml4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtWebKit4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtSql4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtScript4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtNetwork4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtGui4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtDeclarative4.dll
%HOME%\Local Settings\Application Data\MediaGet2\QtCore4.dll
%HOME%\Local Settings\Application Data\MediaGet2\phonon4.dll
%HOME%\Local Settings\Application Data\MediaGet2\mgiehook.dll
%HOME%\Local Settings\Application Data\MediaGet2\MediaInfo.dll
%HOME%\Local Settings\Application Data\MediaGet2\mediaget.exe
%HOME%\Local Settings\Application Data\MediaGet2\mediaget-uninstaller.exe
%HOME%\Local Settings\Application Data\MediaGet2\mediaget-admin-proxy.exe
%HOME%\Local Settings\Application Data\MediaGet2\libvlccore.dll
%HOME%\Local Settings\Application Data\MediaGet2\libvlc.dll
%HOME%\Local Settings\Application Data\MediaGet2\libeay32.dll

 Alte informatii Conexiune internet:
Pentru a verifica legatura la internet se conecteaza la urmatoarele servere DNS:
   • trusted.kaspe**********ky.com
   • download.media-g**********.ru
   • bubblesmed**********.ru
   • mediag**********.com
   • install.media-g**********.ru

 Detaliile fisierului Compresia fisierului:
Pentru a ingreuna detectia si a reduce marimea fisierului, este folosit urmatorul program de arhivare:
   • UPX

説明の挿入者 Alexander Bauer の 2012年10月14日日曜日
説明の更新者 Alexander Bauer の 2012年10月14日日曜日

戻る . . . .
https:// このウィンドウは暗号化されています。