Saturday, November 03, 2007

DomPlayer - Rogue Multimedia Player

DomPlayer is a new rogue multimedia player on the loose. The gang behind DomPlayer is making use of fake video files (available as torrents) to spread this malware. Such fake video files instruct users to download and install DomPlayer (from http://download.domplayer.com/) to play the file. Here's a screenshot of DomPlayer's webpage:

Obviously this player is a fake and demands user to purchase it during installation. It doesn't install if you don't transfer money to their accounts!

It is detected by few AVs as Adware.Lop.BJ, Busky.K and Virus.Trojan.Win32.Obfuscated.en, as shown in this VirusTotal scan result:

This player seems to be a descendant of 3wPlayer, which also used fake video files as a means to get installed in a PC. In addition to this, DomPlayer is published/promoted by Cash4Downloads. Cash4Downloads is also affiliated with Adware programs like WinZix, 3wPlayer and NetPumper.

Avoid DomPlayer at any cost ;)

2 Comments:

Blogger cdman83 said...

I have some more detailed information about this matter (related sites, etc). Contact me at x_at_y_or_z@yahoo.com if you are interested.

6:32 PM  
Blogger Katelyn said...

I very nearly downloaded this before I thought it looked suspicious and decided to check it out. I was about to until I saw this further down the page.

Thanks a load. :-)

4:36 AM  

Post a Comment

<< Home