3wPlayer

Printer Friendly Page

Updated: July 11, 2007 11:33:01 AM

Type: Potentially Unwanted App

Name: 3wPlayer

Publisher: 3wPlayer

Risk Impact: Medium

Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows Server 2003, Windows 2000

When the program is executed, it creates the following files:

C:\Documents and Settings\All Users\Start Menu\Programs\3wPlayer\Uninstall 3wPlayer.lnk
%ProgramFiles%\3wPlayer\settings.ini
%ProgramFiles%\3wPlayer\settings.stp
%ProgramFiles%\3wPlayer\SkinCrafterDll.dll
%ProgramFiles%\3wPlayer\skins\Stylish.skf
%ProgramFiles%\3wPlayer\test.gif
%ProgramFiles%\3wPlayer\unins000.dat
%ProgramFiles%\3wPlayer\unins000.exe
C:\Documents and Settings\All Users\Start Menu\Programs\3wPlayer\3wPlayer.lnk
%ProgramFiles%\3wPlayer\3wPlayer.exe
%ProgramFiles%\3wPlayer\minime.exe

Next, the program creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3wPlayer_is1
HKEY_ALL_USERS\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\3wPlayer
HKEY_ALL_USERS\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\3wPlayer

The program may then download a copy of Adware.Lop on to the computer.

Removal

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}

Learn more about Zero-Day / Operation Aurora / Hydraq