» MediaWatchV1home395.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

MediaWatchV1home395.dll

Media Watch home 395

The module MediaWatchV1home395.dll has been detected as adware by 29 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘MediaWatchV1home395’. This file is typically installed with the program Media Watch by Adware.BetterSurf which is a potentially unwanted software program. BetterSurf is a program that comes with software bundlers that offer free applications and will add a plugin to Internet Explorer, Firefox, and Chrome which displays advertisements on websites and search engines. In addition it will redirct various web browsing to various malvertisng sites.

File name:

Product:

Media Watch home 395

Description:

Media Watch

Version:

1.0.0.1

MD5:

fffddbe427bdcbfe2ca91aef0a8b51d4

SHA-1:

b073967be4522ba3e3bf3bc5dea35011d24496e4

SHA-256:

31380476329b64c77e058b13f44af27f418e8b6541afc58a7daa4ac3d5d96e83

Scanner detections:

29 / 68

Status:

Adware

Explanation:

Installed with software bundlers that offer free applications or games and adds a plugin to Internet Explorer, Firefox, and Chrome and will display ads as the user browses the Internet, both in websites and on search engine results

Analysis date:

4/27/2024 3:27:28 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.BetterSurf.H

1038

Agnitum Outpost

PUA.BetterSurf

7.1.1

AhnLab V3 Security

Adware/Win32.BetterSurf

14.04.02

Avira AntiVirus

ADWARE/Adware.Gen

7.11.140.110

AVG

Skodna.Generic_r

2015.0.3516

Baidu Antivirus

Adware.Win32.BetterSurf

4.0.3.1442

Bitdefender

Adware.BetterSurf.H

1.0.20.460

Comodo Security

ApplicUnwnt

18027

Dr.Web

Adware.BetterSurf.2

9.0.1.092

Emsisoft Anti-Malware

Adware.BetterSurf

8.14.04.02.08

ESET NOD32

Win32/AdWare.BetterSurf (variant)

8.9619

Fortinet FortiGate

Adware/BetterSurf

4/2/2014

F-Secure

Adware.BetterSurf.H

11.2014-02-04_4

G Data

Adware.BetterSurf

14.4.24

K7 AntiVirus

Unwanted-Program

13.176.11613

Kaspersky

not-a-virus:AdWare.Win32.BetterSurf

14.0.0.4076

Malwarebytes

PUP.Optional.MediaWatch.A

v2014.04.02.08

McAfee

Adware-BetterSurf

5600.7172

MicroWorld eScan

Adware.BetterSurf.H

15.0.0.276

NANO AntiVirus

Riskware.Win32.BetterSurf.cvrrct

0.28.0.58720

nProtect

Adware.BetterSurf.H

14.03.31.01

Panda Antivirus

Adware/BetterSurf

14.04.02.08

Qihoo 360 Security

HEUR/Malware.QVM30.Gen

1.0.0.1015

Reason Heuristics

Adware.MediaWatch.T

14.4.2.20

Rising Antivirus

PE:Malware.BetterSurf!6.11BF

23.00.65.14331

Sophos

BetterSurf

4.98

Trend Micro House Call

TROJ_GEN.R0CBC0ECP14

7.2.92

Trend Micro

TROJ_GEN.R0CBC0ECP14

10.465.02

VIPRE Antivirus

BetterSurf

27914

File size:

85 KB (87,040 bytes)

Product version:

1.0.0.1

Original file name:

MediaWatchV1home395.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\mediawatchv1\mediawatchv1home395\ie\mediawatchv1home395.dll

File PE Metadata

Compilation timestamp:

3/20/2014 1:48:20 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:53flScQkGMAJtasrOb8Dk9KpHgNglQ/QW/:plikGMALasrO+pA+a/QQ

Entry address:

0x7A77

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 3B, 38, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 68, D4, EF, 00, 10, FF, 15, 5C, E0, 00, 10, 85, C0, 74, 15, 68, C4, EF, 00, 10, 50, FF, 15, 60, E0, 00, 10, 85, C0, 74, 05, FF, 75, 08, FF, D0, 5D, C3, 8B, FF, 55, 8B, EC, FF, 75, 08, E8, C8, FF, FF, FF, 59, FF, 75, 08, FF, 15, D4, E0, 00, 10, CC, 6A, 08, E8, 57, 3D, 00, 00, 59, C3, 6A, 08, E8, 75, 3C, 00, 00, 59, C3, 8B, FF, 56, E8, 0F, 19, 00, 00... 
[+]

Code size:

49 KB (50,176 bytes)

Internet Explorer BHO

Display name:

MediaWatchV1home395

CLSID:

{f19e6448-70e7-436e-8438-ce5c3f7f71b7}

CLSID name:

Media Watch

The file MediaWatchV1home395.dll has been discovered within the following program.

Media Watch by Adware.BetterSurf

Media Watch is an advertising supported application that injects ads in the user's web browser. It uses a cross-framework browser extension to overwrite and include banner and text-link ads.

84% remove it

Remove MediaWatchV1home395.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.