= FAKE =Video Players and codecs

ict999 · 24-09-07, 08:37

1. 3wPlayer Source

3wPlayer is a rogue media player software application bundled with trojans that can infect computers running Microsoft Windows. It is designed to exploit users who download video files, instructing them to download and install the program in order to view the video. The 3wPlayer employs a form of social engineering to infect computers. Seemingly desirable video files, such as recent movies, are released via BitTorrent or other distribution channels. These files resemble conventional AVI files, but are engineered to display a message when played on most media player programs, instructing the user to visit the 3wPlayer website and download the software to view the video. The program is bundled with malware that has various undesirable effects.

The 3wPlayer is infected with Trojan.Win32.Obfuscated.en, which is typically installed without user interaction through security exploits, and can severely compromise a users' system security. Such risks may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These risks may also collect and transmit personally identifiable information (PII) without a users' consent and severely degrade the performance and stability of the computer.

A perl script posted online can reportedly decrypt 3wplayer files back into AVI. This claim has been tested with mixed results, as the intended AVI file is rarely the desired video file. Users are encouraged to delete the file from their hard drive

2. DivoCodec

The DivoCodec or Divo Codec has also been identified as a virus similar to 3wPlayer. Users are instructed to download the codec in order to view an AVI file. Instead of actual codecs, DivoCodec installs malware on the users computer. The DivoCodec is polymorphic and can change its structure. It has also been known to writes to another process' virtual memory (process hijacking).

Hamed · 24-09-07, 08:39

Bale man khodma yeki az shahedhaye zende hastam
ke shoma khodeton dochare in moshekl shodin

ict999 · 24-09-07, 08:39

lol heres something new i learned today, thought it might be helpful to post this here so i may prevent you making the same mistake i did today.

ict999 · 24-09-07, 08:40

	Quote:
	Originally posted by Hamed Bale man khodma yeki az shahedhaye zende hastam ke shoma khodeton dochare in moshekl shodin

are dishab ye torrent dl kardam injoori bood, albateh zonealarm khodesh pakesh kard mogheye install.

Hamed · 24-09-07, 08:48

Quote:

Originally posted by ict999

	Quote:
	Originally posted by Hamed Bale man khodma yeki az shahedhaye zende hastam ke shoma khodeton dochare in moshekl shodin

are dishab ye torrent dl kardam injoori bood, albateh zonealarm khodesh pakesh kard mogheye install.

Yani jeddan dobare mesle on moghei shod ke man onja bodam ??

ict999 · 24-09-07, 08:52

valah yadam nist to inja boodi chi shode bood, vali na in nabood, chon in jadidan oomadeh, man khodam emrooz bara avalin bar didamesh

sarasar · 24-09-07, 08:54

[I][B][COLOR=tomato]bebin in filmo az torrent dl kardi injoriye?
zod pakesh kon chon miri to on safei ke mige maslan ye programe ke ba in bebbini trojan bid nehson nemide ye file alaki bid ehtemalan ye filme jadid bode khasti bibini

nimamc · 24-09-07, 10:49

are in 3wplayer manam dirooz behesh barkhordam

too torrent bood, too filmaye AXXO. havasetoon bashe kholase!

24-09-07, 08:37	#1 (permalink)
ict999 Forum Legend Join Date: Jul 2005 Location: Liverpool Posts: 1,740 Credits: 570,812 Thanks: 266 Thanked 483 Times in 240 Posts	= FAKE =Video Players and codecs 1. 3wPlayer Source 3wPlayer is a rogue media player software application bundled with trojans that can infect computers running Microsoft Windows. It is designed to exploit users who download video files, instructing them to download and install the program in order to view the video. The 3wPlayer employs a form of social engineering to infect computers. Seemingly desirable video files, such as recent movies, are released via BitTorrent or other distribution channels. These files resemble conventional AVI files, but are engineered to display a message when played on most media player programs, instructing the user to visit the 3wPlayer website and download the software to view the video. The program is bundled with malware that has various undesirable effects. The 3wPlayer is infected with Trojan.Win32.Obfuscated.en, which is typically installed without user interaction through security exploits, and can severely compromise a users' system security. Such risks may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These risks may also collect and transmit personally identifiable information (PII) without a users' consent and severely degrade the performance and stability of the computer. A perl script posted online can reportedly decrypt 3wplayer files back into AVI. This claim has been tested with mixed results, as the intended AVI file is rarely the desired video file. Users are encouraged to delete the file from their hard drive 2. DivoCodec The DivoCodec or Divo Codec has also been identified as a virus similar to 3wPlayer. Users are instructed to download the codec in order to view an AVI file. Instead of actual codecs, DivoCodec installs malware on the users computer. The DivoCodec is polymorphic and can change its structure. It has also been known to writes to another process' virtual memory (process hijacking). __________________

24-09-07, 08:39	#2 (permalink)
Hamed Pluto Join Date: Aug 2004 Location: Kharab shode soed Posts: 8,550 Credits: 39,876 Thanks: 11 Thanked 91 Times in 33 Posts	RE: = FAKE =Video Players and codecs Bale man khodma yeki az shahedhaye zende hastam ke shoma khodeton dochare in moshekl shodin __________________ Man toro mibinam

24-09-07, 08:39	#3 (permalink)
ict999 Forum Legend Join Date: Jul 2005 Location: Liverpool Posts: 1,740 Credits: 570,812 Thanks: 266 Thanked 483 Times in 240 Posts	lol heres something new i learned today, thought it might be helpful to post this here so i may prevent you making the same mistake i did today. __________________

24-09-07, 08:52	#6 (permalink)
ict999 Forum Legend Join Date: Jul 2005 Location: Liverpool Posts: 1,740 Credits: 570,812 Thanks: 266 Thanked 483 Times in 240 Posts	valah yadam nist to inja boodi chi shode bood, vali na in nabood, chon in jadidan oomadeh, man khodam emrooz bara avalin bar didamesh __________________

24-09-07, 08:54	#7 (permalink)
sarasar Emperor Join Date: Oct 2004 Location: Sweden(V�ster�s) Posts: 1,303 Credits: 2,299 Thanks: 442 Thanked 281 Times in 131 Posts	[I][B][COLOR=tomato]bebin in filmo az torrent dl kardi injoriye? zod pakesh kon chon miri to on safei ke mige maslan ye programe ke ba in bebbini trojan bid nehson nemide ye file alaki bid ehtemalan ye filme jadid bode khasti bibini __________________ "There are two kinds of people, those who do the work and those who take the credit. Try to be in the first group; there is less competition there." - Indira Gandhi

24-09-07, 10:49	#8 (permalink)
nimamc Pluto Join Date: Aug 2005 Location: Holland Posts: 9,329 Credits: 12,268 Thanks: 4,315 Thanked 1,745 Times in 1,089 Posts	are in 3wplayer manam dirooz behesh barkhordam too torrent bood, too filmaye AXXO. havasetoon bashe kholase! __________________ Women are free little puzzles and I enjoy "solving" them.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Fake ID!	Farzan101	Interesting Pictures	13	26-02-08 09:39
Problem with Video Files/Codecs (Heeeeeeelp! Torokhoda Komak Konid!)	liverpoolfc	General Help	6	15-05-06 19:31
branko calls upon only IPL players(no overseas players)	joonevar	Soccer	0	09-07-05 16:04