Home Malware Programs Potentially Unwanted Programs (PUPs) FusionPlayer Ads

FusionPlayer Ads

Posted: July 16, 2015

Threat Metric

Threat Level: 1/10
Infected PCs: 630
First Seen: July 16, 2015
Last Seen: June 22, 2023
OS(es) Affected: Windows

Although your first impressions about FusionPlayer may be that it is a reliable and helpful application, in fact, this software is classified as a Potentially Unwanted Program (PUP). FusionPlayer is advertised as a legitimate video player that allows its clients to create playlists with both video and audio files. The way this feature is explained, combined with the manipulated positive reviews, can easily deceive some users to install the PUP. However, as soon as the application reaches your system, it attaches to Google Chrome, Mozilla Firefox and Internet Explorer as an add-on. This action allows it to change a series of settings in your browsers. As a result, you may face plenty of ads when you launch your browsers. The newly created commercial content can take various forms – including banners, pop-ups, pop-unders, interstitial ads and even hyperlinked keywords. As you may expect, the purpose of this behavior is to generate traffic towards sponsored pages, but it may cause some inconvenience to the user. These ads rely on the resources of your PC, so their loading often worsens the performance of the web client. In addition, the ads may lead to some unsafe domains that may try to trick their visitors. If you are not satisfied with the changes made by FusionPlayer, you should use professional security software to remove it.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\FusionPlayer\FusionPlayerUpdaterService.exe File name: FusionPlayerUpdaterService.exe
Size: 11.77 KB (11776 bytes)
MD5: 442f68fdd16de0d709dafb28e07c5ad8
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FusionPlayer
Group: Malware file
Last Updated: May 20, 2016
C:\Program Files (x86)\FusionPlayer\FusionPlayerUpdater.exe File name: FusionPlayerUpdater.exe
Size: 403.45 KB (403456 bytes)
MD5: 2f9e0d8786138c81a4643cc11e2dd48e
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\FusionPlayer\FusionPlayerUpdater.exe
Group: Malware file
Last Updated: February 5, 2023

Registry Modifications

The following newly produced Registry Values are:

File name without pathFusionPlayer.lnkwww.fusionplayer[1].xmlRegexp file mask%WINDIR%\System32\Tasks\FusionPlayer browser banner%WINDIR%\System32\Tasks\FusionPlayer UpdaterHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\.3gp\FusionPlayer.backupSOFTWARE\Classes\.aac\FusionPlayer.backupSOFTWARE\Classes\.AIF\FusionPlayer.backupSOFTWARE\Classes\.avi\FusionPlayer.backupSOFTWARE\Classes\.mkv\FusionPlayer.backupSOFTWARE\Classes\.mov\FusionPlayer.backupSOFTWARE\Classes\.mp3\FusionPlayer.backupSOFTWARE\Classes\.mp4\FusionPlayer.backupSOFTWARE\Classes\.mpeg\FusionPlayer.backupSOFTWARE\Classes\.mpg\FusionPlayer.backupSOFTWARE\Classes\.wav\FusionPlayer.backupSOFTWARE\Classes\.wma\FusionPlayer.backupSOFTWARE\Classes\.wmv\FusionPlayer.backupSOFTWARE\Classes\Applications\FusionPlayer.exeSOFTWARE\Microsoft\Internet Explorer\DOMStorage\fusionplayer.comSOFTWARE\Microsoft\Tracing\BrowserBanner_RASAPI32SOFTWARE\Microsoft\Tracing\BrowserBanner_RASMANCSSOFTWARE\Microsoft\Tracing\FusionPlayerUpdater_RASAPI32SOFTWARE\Microsoft\Tracing\FusionPlayerUpdater_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FusionPlayer browser bannerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FusionPlayer UpdaterSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\OpenWithProgids\FusionPlayer.3gpSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\OpenWithProgids\FusionPlayer.aacSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\OpenWithProgids\FusionPlayer.aifSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\OpenWithProgids\FusionPlayer.aviSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\OpenWithProgids\FusionPlayer.mkvSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\OpenWithProgids\FusionPlayer.movSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithProgids\FusionPlayer.mp3SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\OpenWithProgids\FusionPlayer.mp4SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\OpenWithProgids\FusionPlayer.mpegSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\OpenWithProgids\FusionPlayer.mpgSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\OpenWithProgids\FusionPlayer.wavSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\OpenWithProgids\FusionPlayer.wmaSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\OpenWithProgids\FusionPlayer.wmvSOFTWARE\Wow6432Node\FusionPlayerSOFTWARE\Wow6432Node\Microsoft\Tracing\FusionPlayer_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\FusionPlayer_RASMANCSHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}FusionPlayer

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\FusionPlayer%APPDATA%\Microsoft\Windows\Start Menu\Programs\FusionPlayer%LOCALAPPDATA%\fusionplayer%PROGRAMFILES%\FusionPlayer%PROGRAMFILES(X86)%\FusionPlayer
Loading...