home

trustmediaviewerv1alpha2665x64.dll

Trust Media Viewer alpha 2665

The module trustmediaviewerv1alpha2665x64.dll, “Trust Media Viewer” has been detected as a potentially unwanted program by 14 anti-malware scanners. BetterSurf is a program that comes with software bundlers that offer free applications and will add a plugin to Internet Explorer, Firefox, and Chrome which displays advertisements on websites and search engines. In addition it will redirct various web browsing to various malvertisng sites.
Product:
Trust Media Viewer alpha 2665

Description:
Trust Media Viewer

Version:
1.0.0.1

MD5:
36bc2dad92b80225a0ff259eedfaf037

SHA-1:
2ee11ccc568308fe40245034eb854230824b1b1f

SHA-256:
fc24ce0c00a06812acf86a9468a78855e7505f7eb4d3a94ea68b398db383871c

Scanner detections:
14 / 68

Status:
Potentially unwanted

Explanation:
Installed with software bundlers that offer free applications or games and adds a plugin to Internet Explorer, Firefox, and Chrome and will display ads as the user browses the Internet, both in websites and on search engine results

Analysis date:
4/24/2024 10:31:06 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.SwiftBrowse.AX
885

Baidu Antivirus
Adware.Win32.BetterSurf
4.0.3.14822

Bitdefender
Adware.SwiftBrowse.AX
1.0.20.1225

Emsisoft Anti-Malware
Adware.SwiftBrowse.AX
8.14.09.02.05

F-Secure
Adware.SwiftBrowse.AX
11.2014-02-09_3

G Data
Adware.SwiftBrowse.AX
14.9.24

IKARUS anti.virus
AdWare.BetterSurf
t3scan.1.6.1.0

Malwarebytes
PUP.Optional.TrustMediaViewer.A
v2014.08.22.12

MicroWorld eScan
Adware.SwiftBrowse.AX
15.0.0.735

nProtect
Adware.SwiftBrowse.AX
14.08.13.01

Panda Antivirus
Trj/CI.A
14.09.02.05

Reason Heuristics
Threat.Win.Reputation.IMP
14.9.2.17

SUPERAntiSpyware
Adware.BetterSurf/Variant
10406

Trend Micro House Call
TROJ_GEN.R0C9H05G614
7.2.234

File size:
100.5 KB (102,912 bytes)

Product version:
1.0.0.1

Copyright:
(c) 2012-2014. All rights reserved.

Original file name:
TrustMediaViewerV1alpha2665.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\trustmediaviewerv1\trustmediaviewerv1alpha2665\ie\trustmediaviewerv1alpha2665x64.dll

Registration
CLSID:
{74f93a87-ce0c-4de3-8934-598904ded254}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
6/25/2014 12:44:14 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:NBjCnTZPTGSRzBHsQnTfGNAjQsSWfzQBTJtF9vm:NNCnTZPTGAlHdTONAjuBvv

Entry address:
0x8550

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, E7, 45, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 20, 8B, D9, 48, 8D, 0D, A9, 82, 00, 00, FF, 15, 03, 6B, 00, 00, 48, 85, C0, 74, 19, 48, 8D, 15, 87, 82, 00, 00, 48, 8B, C8, FF, 15, F6, 6A, 00, 00, 48, 85, C0, 74, 04, 8B, CB, FF, D0, 48, 83, C4, 20, 5B, C3, CC, CC, CC, 40, 53, 48, 83...
 
[+]

Entropy:
5.8051

Code size:
55.5 KB (56,832 bytes)

Remove trustmediaviewerv1alpha2665x64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.