3wplayer

3wplayer, also known as DomPlayer, is a harmful application that installs viruses and trojans.

3wPlayer is a rogue media player software application bundled with trojans that can infect computers running Microsoft Windows. It is designed to exploit users who download video files, instructing them to download and install the program in order to view the video. The 3wPlayer employs a form of social engineering to infect computers. Seemingly desirable video files, such as recent movies, are released via BitTorrent or other distribution channels. These files resemble conventional AVI files, but are engineered to display a message when played on most media player programs, instructing the user to visit the 3wPlayer website and download the software to view the video. The program is bundled with malware that has various undesirable effects.

The 3wPlayer is infected with Trojan.Win32.Obfuscated.en, which is typically installed without user interaction through security exploits, and can severely compromise a user's system security. Such risks may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These risks may also collect and transmit personally identifiable information (PII) without a users' consent and severely degrade the performance and stability of the computer.

there is a perl script to decode the 3wplayer file back into avi

See Also

• http://torrentfreak.com/bittorrent-malware-spreads-to-media-players/
• http://forum.mininova.org/lofiversion/index.php?t234994521.html