Malware

BrowserModifier:MSIL/MediaArena removal instruction

Malware Removal

The BrowserModifier:MSIL/MediaArena is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BrowserModifier:MSIL/MediaArena virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine BrowserModifier:MSIL/MediaArena?


File Info:

name: BE68C042388F81A998D2.mlw
path: /opt/CAPEv2/storage/binaries/cc8527ef2aaa83179e252bfe676f5e564b19f02e878cbf2a418e02bf2f3c3eb9
crc32: A20872A8
md5: be68c042388f81a998d285e1c35d9d67
sha1: 6d295767052d7b7e699cc993dfbadddb8c810a87
sha256: cc8527ef2aaa83179e252bfe676f5e564b19f02e878cbf2a418e02bf2f3c3eb9
sha512: e45658ade8375f7623c3aec73343edeb6106d48995390421ecea113f291cd97db8d9a866a5f6fe71c06ac6ea63d29713b89cdbb9bc948256a8ec189ac15b4bca
ssdeep: 24576:7DjpAY4qMMMugNGbnmTxNrjjKjjjjjjtpjjsRd4RsRd4r1AOXUX/1AhVpvQsRd41:Xjpp/gNGbmT7jjYpjoRd1RdmTRdnRdM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11165AE2712AB015BF5B0C970B36E47B273138F6DF841D9646124B18A59FE30A29E7FC9
sha3_384: 61ab6746488e19f5e1fff32c5134d3ca1d11ec507a6e02ba35b0aa26a4207e01dee4bc729080a6d98bfa70e912524b64
ep_bytes: ff250020400000000000760065007200
timestamp: 2081-11-27 16:41:39

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: PDFCentral
FileVersion: 1.0.9.5
InternalName: PDF Central.exe
LegalCopyright: Copyright © 2022
LegalTrademarks:
OriginalFilename: PDF Central.exe
ProductName: PDFCentral
ProductVersion: 1.0.9.5
Assembly Version: 1.0.9.5

BrowserModifier:MSIL/MediaArena also known as:

BkavW32.Common.C25645E7
Elasticmalicious (moderate confidence)
DrWebAdware.Linkury.151
MicroWorld-eScanAdware.Generic.3133920
SkyhighArtemis!PUP
McAfeeArtemis!BE68C042388F
Cylanceunsafe
VIPREAdware.Generic.3133920
K7AntiVirusAdware ( 005ae0cf1 )
K7GWAdware ( 005ae0cf1 )
Cybereasonmalicious.2388f8
ArcabitAdware.Generic.D2FD1E0
ESET-NOD32a variant of MSIL/MediaArena.B potentially unwanted
BitDefenderAdware.Generic.3133920
AvastWin32:Malware-gen
EmsisoftAdware.Generic.3133920 (B)
FireEyeAdware.Generic.3133920
SophosGeneric Reputation PUA (PUA)
SentinelOneStatic AI – Malicious PE
VaristW32/MediaArena.B.gen!Eldorado
MicrosoftBrowserModifier:MSIL/MediaArena
GDataWin32.Application.Agent.HT0T1K
ALYacAdware.Generic.3133920
MAXmalware (ai score=62)
MalwarebytesPUP.Optional.MediaArena
IkarusPUA.MediaArena
MaxSecureTrojan.Malware.236666436.susgen
FortinetAdware/MediaArena
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove BrowserModifier:MSIL/MediaArena?

BrowserModifier:MSIL/MediaArena removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment