Mplayerx mac virus full#
Mplayerx mac virus software#
Mplayerx mac virus professional#

Mplayerx mac virus professional#

The very plain and simple facts are that this company has taken quite deliberate to measures to encrypt the coding to obfuscate this adware so only people with professional expertise would have any knowledge of the capabilities of this nasty crap. How on earth can you say the developer is being honest about the change. Thanks to Thomas Reed for your very informative website and excellent tech advice, Please keep up the good work and keeping us all informed about these dangers.

Mplayerx mac virus software#

It of course goes without saying NONE of their software will ever be installed on my mac again.

Their conduct has been truly despicable with them taking measures to encrypt and obfuscate the nasty stuff and avoid detection when installed on a virtual system and violating our trust in them. This company simply can’t be trusted by mac users any more.

Mplayerx mac virus full#

Unfortunately they are quite well aware that a great many people don’t take the precaution of checking what’s in the installer documentation and just speedily click the necessary boxes.įortunately full system scans of my mac’s HD with Intego’s Virus Barrier and your truly excellent AdwareMedic have NOT detected anything at all of this nature, So I guess I have been very lucky to dodge this one. I installed MPlayerX some time ago and was completely unaware of this adware issue.

Hopefully they’ll be on it quickly and will block this installer through XProtect. This malware-like behavior has been reported to Apple’s product security team. The extension itself serves only to direct searches to a specific Yahoo Search BOSS address, as described for some nearly identical adware in InstallCore adware proliferates. The adware that this app installs takes the form of a “Jeff Kekko” browser extension, supposedly made by someone named Jeffrey Kekkonen. The end result is that it behaves exactly like one would expect a normal MPlayerX installer to work… it just installs MPlayerX. When run in a virtual system in Parallels, however, this installer skips over the Configure phase entirely! No adware or third-party junk software is offered or installed. This is not particularly new, and has been described here before, although never with an installer downloaded directly from the MPlayerX site. When run on a “real” computer, the installer goes through a “Configure” phase in which it offers a Yahoo Search extension (adware), a copy of MacKeeper and a copy of ZipCloud. This is done because malware researchers often run malware in a virtual machine, because this isolates the malware and makes it easy to store the system’s infected state for later reference or revert the system to a previous state.Ī new MPlayerX installer, this time available directly from the MPlayerX website, is exhibiting exactly this behavior. Malware that detects that it is being run in a virtual machine, for example, will not display any malicious behaviors. One such trick in the news right now is the Rombertik malware on Windows, which will erase files on the hard drive (including an attempt to damage system files) if it thinks it’s being tampered with.Ī more common trick, though, is to simply act normal. Malware has used many tricks to foil analysis over the years. Worse, the installer is now displaying malware-like behavior, by trying to foil analysis!

However, it now appears that the folks behind MPlayerX are definitely in on the scam. Most of the time, MPlayerX is installed along with the adware to (somewhat) disguise the fact that anything else was installed. MPlayerX has long been used as “bait” to convince people to run adware installers.