Parasite: FastVideoPlayer

This record last updated Tue Sep 20 2005 00:34:15

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

FastVideoPlayer is not a video player at all, but an ActiveX installer for premium-rate phone diallers, typically Wink variants. FastVideoPlayer is controlled and distributed by the Lexitrans porn group, who are also behind Wink.

Distribution

ActiveX drive-by download in porn-related pop-ups.

What it does

Advertising

No.

Privacy violation

No.

Security issues

Yes. Any web page can direct it to install arbitrary code downloaded from its controlling server. It also sneaks certificates of related vendors into the Internet Explorer Trusted Publishers list so that their diallers will download and run silently without needing user approval.

Stability problems

No.

Removal

Open a Command Prompt window (from Start->Programs->Accessories; called ‘DOS Prompt’ under Windows 95/98/Me) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u fastvideoplayer.dll

Open the Content tab of the Internet Options window (from IE’s Tools->Options) and click ‘Publishers...’. Remove the entries for ‘live cams’, ‘live video’ and ‘Proclaim Telcom’. (It is usually best to keep this list completely empty.)

* Parasite information and detection script by Andrew Clover - www.doxdesk.com, used with permission.

For more information about Scumware, Spyware and Parasites, their sources and their cure, visit our About Parasites page and related Tech Links.

Visit our new services portal at Allen One for a completely new parasite database format, comming November 2005!