locked
question about adware RRS feed

  • Question

  • Has anyone  ever heard of AdWare.Win32.AdMedia.ei.  When I did a scan with kasperky it said that two files were infected with it.  I did a scan with windows live one care and didn't find anything.  I have looked on the net and have found other win32.admedia adware but can't find this particular one.   Is this a real threat or just a false alarm?
    Wednesday, December 17, 2008 4:34 PM

Answers

All replies

  •   

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

     

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx  for details.  For international information, see your local subsidiary Support site.

    If you are using the free OneCare Safety Scanner, the engine and detection are similarto/the same as the installed version, but you would be off topic for this forum.
    The Safety scanner forum is here:  

    http://boards.live.com/safetyboards/board.aspx?BoardID=225

    Note that malware naming is often unique to each vendor, so what Kaspersky is detecting may not be what other vendors call it, if in fact there is an infection. There are many variants of the malware AdWare.Win32:
    http://www.microsoft.com/security/portal/SearchResults.aspx?query=AdWare.Win32.AdMedia.


    -steve


    Microsoft MVP Windows Live / Windows Live OneCare Forum Moderator
    Wednesday, December 17, 2008 7:41 PM
    Moderator
  • To be precise, Kaspersky classes this detection as follows:

    not-a-virus:AdWare.Win32.AdMedia.ei

    http://www.viruslist.com/en/find?words=AdWare.Win32.AdMedia.ei

    Note the "not-a-virus" designation, which clearly indicates this is simply adware which displays advertisements with no direct malicious intent.

    OneCare doesn't attempt to detect simple adware, since this can result in conflicts with organizations over where to draw the line between 'good' or 'bad' advertisements. They instead concentrate on true malware, which are items that infect and directly attempt to attack your PC, files and/or personal information in some way.

    Kapersky is relatively well known in the security software industry for finding nearly everything, which for some people is the desired result. Microsoft simply sees this as so much 'noise' that serves to confuse the user unnecessarily, so they reserve such warnings for true threats to your PC software or privacy.

    < EDIT > Also, note that the files identified in this case aren't really 'infected', but are rather portions of the adware program itself, since that's what the detection is actually telling you. That's part of the confusion factor I mentioned earlier.

    OneCareBear
    Windows OneCare Forum Moderator
    Thursday, December 18, 2008 6:17 AM
    Moderator