Hi Guys. This is my first post.
I use The KMPlayer to play all of my videos, but yesterday, something happened. I was watching one of those videos when a window bring to front and it says: “There´s an actualization available” (of the KMPlayer, of course…) with three buttons: “Visit the web site”, “Auto-update” and “Close”. I press the Auto-update button and it start to “install” the new version. When something is installing, the message is “copying new files” (and such things) but this was a message of “Downloading XXXXXXXXX file… Executing XXXXXXXXX file” (XXXXXXXXX is whatever, I don’t remember it) and I get concerned about ???. It was in the third application when an avast! message told me “Malware detected. Connection aborted” and Google Chrome it opened and I went for the web site of avast! that it says “You were close…” (or something like that). I felt safe… for that moment. But, when I see the files in PROGRAM FILES, i see a file named “sponsorkeyword” that contains the files “sponsorkeyword.exe” and “sponsorkeyword_uninstall.exe”. I just erase all of that, because I was scared (I already uninstall The KMPlayer). I start to search information about that application in web (because my avast! don’t detected it as a virus or something bad) and I get this:
Submission received: 17 June 2011, 00:45:00
Processing time: 11 min 47 sec
Submitted sample:
File MD5: 0x6124E9F660F5D7B432956DBF9F6AFCAB
File SHA-1: 0xB4C528E07A794E9E4DADA55469300621A5E2A187
Filesize: 343.352 bytes
Alias: Gen.Variant.Cudos [Ikarus]
The complete information is here: http://www.threatexpert.com/report.aspx?md5=6124e9f660f5d7b432956dbf9f6afcab.
If you can, uninstall the KMPlayer and use better Media Player Classic, or Windows Media Player. Post your comments please.
(Sorry about my English )