Adware/Trymedia

description-logoAnalysis

Adware/Trymedia is classified as Adware.  Adware are software components that display unsolicited advertisements. For additional information about Adware and how Fortinet classifies Spyware threats, please see Fortinet's paper in PDF format: Spyware Classification and Terms.

Adware/TryMedia displays pop-up advertisements. It is usually installed with the online game The Rise of Atlantis.

  • It creates the following folder:
    • undefinedCommonDesktopDirundefined\Downloads
  • It adds the following registry so that this adware is started everytime Windows starts:
    • key: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    • value: 511ebbe7d931e169587cef1d695c4af9
    • data: [Path of this adware]
  • It uses the following mutex:
    • 3D Mini Golf (Italiano)
  • It tries to access the following URLs:
    • d.trymedia.com
    • amlocalhost.macrovision.com

    recommended-action-logoRecommended Action

      FortiGate Systems
    • Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the 'Allow Push Update' option.
      FortiClient Systems
    • Quarantine/delete files that are detected and replace infected files with clean backup copies.

    Telemetry logoTelemetry

    Detection Availability

    FortiGate
    Extended
    FortiClient
    FortiMail
    FortiSandbox
    FortiWeb
    Web Application Firewall
    FortiIsolator
    FortiDeceptor
    FortiEDR

    Version Updates

    Date Version Detail
    2024-02-29 92.02027
    2023-07-25 91.05424
    2023-06-27 91.04592
    2023-06-27 91.04590
    2023-06-27 91.04583
    2023-05-26 91.03623
    2023-05-24 91.03560
    2023-05-09 91.03111
    2023-05-08 91.03075
    2023-05-07 91.03054