/ 3wplayer Downloader Trojan

3wplayer Downloader Trojan

The 3wplayer application is a Downloader Trojan program.

A downloader Trojan program is often installed under a false pretense of being beneficial to the user. These applications install and execute a malicious component without the user’s knowledge. Downloader Trojan applications have the capability to download and run other malware applications. The malicious software may have a variety of abilities, causing damage and disruption of normal system functions.

The 3wplayer application is affiliated with the websites http://www.3wplayer.com/ and DailyAppz.Play3w.com. The program is being marketed as a wide-ranging media player. Advertisements show that it can play several file formats. It also has an easy to use interface. The program is compatible with the Windows Operating System.

The 3wplayer application may be willingly installed into the system by the user. Users may be unaware of reports that show if the system is infected with the Trojan.Win32.Obfuscated.en program. Once installed, it can also download and execute other malware programs with adware capabilities into a system.

This application is often distributed in the tactic associated with downloadable content. Videos that are likely to be downloaded are uploaded into file-sharing sites or networks. The files often appear to be in the conventional AVI format. Once the file is fully downloaded and the user attempts to watch the video, a message will appear.

The message then tells the user that the downloaded video can only be played with the 3wplayer application. It further directs the user to a site where the media player can be downloaded free. Upon installation, the program also installs adware programs that are included with its software. Downloaded media files mostly do not contain the expected videos.

Upon execution, the 3wplayer software reportedly creates the following files:

C:\Documents and Settings\All Users\Start Menu\Programs\3wPlayer\Uninstall 3wPlayer.ink;
%ProgramFiles%\3wPlayer\settings.ini;
%ProgramFiles%\3wPlayer\settings.stp;
and %ProgramFiles%\3wPlayer\SkinCrafterDll.dll.

One adware program that the 3wplayer application has been reported to download and install is the Adware.Lop application. This software can hijack the Web browser. It is also capable of adding a search button and toolbar to the Internet Explorer program without consent from the user. Malware programs downloaded by the 3wplayer application make the system susceptible to pop-up advertisements, undesired networks, security software disabling and personal information theft.

The 3wplayer application may be detected under the following names: