Defend what you create

Other Resources

Close

Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.DownLoader33.46185

Added to the Dr.Web virus database: 2020-05-25

Virus description added:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [<HKLM>\Software\Classes\gomcmd-plus32\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mxf\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mpq\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).qt\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).3g2\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).duk\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).vdr\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).evo\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).dvr-ms\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).amv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).gxf\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).webm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).vtt\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).sup\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).psb\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).sbv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ass\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ssa\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).sub\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).rt\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).smil\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mpl\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).nsv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).vp6\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).vp7\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).spx\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).rso\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mpc\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mp2\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).tta\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).m4a\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).gsm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).dss\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).caf\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).oma\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mka\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).amr\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).wv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).shn\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).alac\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).dff\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ape\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).dsf\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).aif\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).aiff\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).h264\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ncg\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).tak\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).gbm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).smi\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).m1v\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).vob\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ifo\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mpe\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mpg\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).wmp\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).wm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).wvx\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).wmv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).m2v\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).wmx\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).asx\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).divx\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).svi\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).avi\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).gom\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\ogms-plus32\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" "%1"'
  • [<HKLM>\Software\Classes\avis-plus32\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" "%1"'
  • [<HKLM>\Software\Classes\gomlogo-plus32\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" "%1"'
  • [<HKLM>\Software\Classes\jamak-plus32\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).asf\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).dvd\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).tp\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).dmb\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).m2t\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).m2ts\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mts\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ts\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mpeg\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mov\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mqv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).flv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).swf\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ogv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).ogm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mkv\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).rmvb\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).rm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).lmp4\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).dmskm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).skm\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).3gp\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).k3g\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).m4v\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).mp4\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).srt\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
  • [<HKLM>\Software\Classes\GOMPlayerPlus(x86).MediaFile\shell\open\command] '' = '"%ProgramFiles(x86)%\GOM\GOMPlayerPlus\GOM.EXE" /open "%1"'
Modifies file system
Creates the following files
  • %TEMP%\is-qdmoo.tmp\<File name>.tmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\notifydlg\btn_pop_gr.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\notifydlg\btn_pop_close.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_set.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_remote_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_remote.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_pin_play.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_pin_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_pin.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_opapick_p.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_opapick_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_opapick.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_opa_slider.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_mini.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_menu.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_maxire.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_maxi.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_key_regular_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_entire_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_key_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\notifydlg\btn_pop_org.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\notifydlg\update.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\scroll_bg.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\scroll_bar_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\scroll_bar_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\img_list_sel.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\img_list_prs.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\img_list_fcs.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_shuffle_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_shuffle.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_pl_next_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_pl_next_off.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_pl_all_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_pl_all.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_listset.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_listsel.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_listalign.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_del.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_add.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_entire.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\toolbar\btn_catmode.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\logo\img_dftvideo.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_mark_h.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_mark.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_chaptermarker_h.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_chaptermarker.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\font_time_gr.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\font_time.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_youtube.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_sub.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_stop.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_play.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_pl.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_pause.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_forward.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_fileopen.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_control.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_capture.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_play_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_section_l.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_play_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_section_r.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\logo\opening_anim.bmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_vol_pick.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\logo\opening.bmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\logo\audio_anim.bmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\logo\audio.bmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_org_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_org_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_load_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\playlist\btn_pl_one.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\bg_img.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_adpoint_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_adpoint_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\img_vol_org_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\img_vol_org_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\img_vol_n.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\img_vol_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_volume_off.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\icn_volume.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\playslider_load_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\img_lock.png
  • %APPDATA%\microsoft\internet explorer\quick launch\gom player plus (x86).lnk
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\connect_icon.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\cht.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\chs.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\vr360_help.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\img_tip3_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\img_tip3_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\img_tip3_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\img_tip1_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\img_tip1_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\img_tip1_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\img_tip.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\guide_right_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\guide_right_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\guide_right_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\guide_center_2_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\guide_center_2_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\guide_center_2_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_pressed_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_pressed_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_pressed_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\cze.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\english.ini
  • C:\users\public\desktop\gom player plus (x86).lnk
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\gom\gom player plus (x86)\gom player plus (x86).lnk
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\gom\gom player plus (x86)\uninstall.lnk
  • %TEMP%\nsxbbb3.tmp\inetc.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\uninstall.exe
  • %ProgramFiles(x86)%\gom\gomplayerplus\uninstall.dat
  • %ProgramFiles(x86)%\gom\gomplayerplus\logos\gom_orange.jpg
  • %ProgramFiles(x86)%\gom\gomplayerplus\logos\gom.jpg
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\thai.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\close_normal.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\spanish.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\russian.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\por.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\korean.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\japan.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\ita.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\ger.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\fra.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_over_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_over_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_over_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\start_normal_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\start_normal_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\start_normal_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\remote_notify.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\infoimage_min_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\infoimage_min_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\infoimage_min_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\infoimage_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\infoimage_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\infoimage_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\howto_over_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\howto_over_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\howto_over_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\howto_normal_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\howto_normal_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\howto_normal_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\start_over_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\start_over_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\start_over_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\btn_check.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_default_kor.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\btn_pop_close.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_default_jpn.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_notify_close_default_eng.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\btn_close.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\vr360\bg_img.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\register.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\pop_input_f.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\pop_input.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_back.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\remote\close_over.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\img_info.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\img_gomplayer03.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\img_gomplayer02.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\img_coupon.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\btn_uncheck.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\btn_pop_org.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\btn_pop_line.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\btn_pop_gr.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\registration\img_mail.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\lang\tur.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\main\controlbar\btn_360.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_play.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\colorpicker\btn_controll.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\colorpicker\btn_coloradd.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\controlid.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\urls\default.asx
  • %ProgramFiles(x86)%\gom\gomplayerplus\text\historykor.txt
  • %ProgramFiles(x86)%\gom\gomplayerplus\text\historyeng.txt
  • %ProgramFiles(x86)%\gom\gomplayerplus\setting.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\lgpl.txt
  • %ProgramFiles(x86)%\gom\gomplayerplus\grlauncher.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\gomprotect.exe
  • %ProgramFiles(x86)%\gom\gomplayerplus\srt2smi.exe
  • %ProgramFiles(x86)%\gom\gomplayerplus\rtparser.exe
  • %ProgramFiles(x86)%\gom\gomplayerplus\grlauncher.exe
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\d3dcompiler_43.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\openvr_api.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\mediasource.ax
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\gvrf.ax
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\gsfu.ax
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\gvf.ax
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\colorpicker\btn_pop.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\colorpicker\btn_pop_close.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_checkbox.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_caption_close.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_caption_back.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_add_icon.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_vscrolltotop.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_vscrolltobottom.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_listvscrolltotop.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_listvscrolltobottom.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_listhscrolltoleft.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\avcodec-gp-57.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_hscrolltoright.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_hscrolltoleft.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\prefsearch.db
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\loadingindicator\gomload.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\loadingindicator\loadingindicator.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\colorpicker\skin_colorpicker.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\colorpicker\img_color_cirle1.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\colorpicker\frame_color_control_bar1.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\grfu.ax
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\gnf.ax
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\gaf.ax
  • %ProgramFiles(x86)%\gom\gomplayerplus\killgom.exe
  • %TEMP%\nsxbbb3.tmp\md5dll.dll
  • %TEMP%\nsxbbb3.tmp\system.dll
  • %TEMP%\nsispromotionex.dll
  • %TEMP%\atl110.dll
  • %TEMP%\customizecontrols.dll
  • %TEMP%\nsg9369.tmp
  • %TEMP%\is-tbl2g.tmp\setup.exe
  • %TEMP%\is-tbl2g.tmp\itdownload.dll
  • %TEMP%\is-tbl2g.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-tbl2g.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-knk89.tmp\setup.tmp
  • %TEMP%\is-19vii.tmp\setup.exe
  • %TEMP%\is-19vii.tmp\itdownload.dll
  • %TEMP%\is-19vii.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-19vii.tmp\_isetup\_setup64.tmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\crashdumpcollector.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\gom.ini
  • %ProgramFiles(x86)%\gom\gomplayerplus\gom.exe
  • %ProgramFiles(x86)%\gom\gomplayerplus\gomvr.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\libmp3lame.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\icon.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\tbb.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\swscale-gp-4.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\swresample-gp-2.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\subtitlefilter.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\subtitle.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\sandollfontapi.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\mediainfo.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_listhscrolltoright.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_del_icon.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\gifmaker.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\dodge.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\d3dx9_43.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\avutil-gp-55.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\avformat-gp-57.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\avfilter-gp-6.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\libass.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\vsutil.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\modules\qscl.dll
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\settingskin\skin.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\img_cnt_org.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_mod_icon.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_reset.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_plus_l.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_plus02.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_plus.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_minus_l.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_minus02.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_minus.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_forward_play02.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_forward_play01.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_forward.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_dropdown.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_cntpop.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_backward.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_back_play02.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_back_play01.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\bg_cnt_04.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\bg_cnt_03.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\bg_cnt_01.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\bg_cnt_02.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_time.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_toggle_off.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\img_cnt.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\img_bg02.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\img_bg.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_subtitle_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_subtitle.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_sound_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_sound.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_play_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_display_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_down_arrow_icon.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_display.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_cnt_pick.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_capture_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\icn_capture.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\controls_bg.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\check_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\check_off.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\btn_toggle_on.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\common\btn_pop_org.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\common\btn_pop_gr.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\common\btn_close.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_font.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_filtercodec.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_etc.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_droplist_thumb.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_audio.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\eq_slider_thumb.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_up_arrow_icon.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_switch.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_spin_plus.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_spin_minus.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_search_x.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_search.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_reset_all.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_reset.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_radio.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_popup_close.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_home.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_playback.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_general.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_save.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\skin.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_search.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\list.xml
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\watermark\gomtv_mk.bmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\watermark\gomtv.bmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\jmdbhtml\noticebg.gif
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\jmdbhtml\jmdbtemp.html
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\jmdbhtml\close_on_btn.gif
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\jmdbhtml\close_off_btn.gif
  • %ProgramFiles(x86)%\gom\gomplayerplus\skins\gom2017\controls\img_timeinput.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\btn_home.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\settingskin\buttonframe.bmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\slider_thumb.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\img_skin_touch.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\img_skin_gom2016.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\img_skin_basicwhite.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_video.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_text_align.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\preference\icon_subtitle.png
  • %ProgramFiles(x86)%\gom\gomplayerplus\resource\settingskin\skin_quick.xml
  • %APPDATA%\microsoft\windows\start menu\gom player plus (x86).lnk
Deletes the following files
  • %TEMP%\is-qdmoo.tmp\<File name>.tmp
  • %TEMP%\is-knk89.tmp\setup.tmp
  • %ProgramFiles(x86)%\gom\gomplayerplus\killgom.exe
  • %TEMP%\nsispromotionex.dll
  • %TEMP%\customizecontrols.dll
  • %TEMP%\atl110.dll
  • %TEMP%\nsxbbb3.tmp\inetc.dll
  • %TEMP%\nsxbbb3.tmp\md5dll.dll
  • %TEMP%\nsxbbb3.tmp\system.dll
Substitutes the following files
  • %ProgramFiles(x86)%\gom\gomplayerplus\killgom.exe
Network activity
TCP
HTTP GET requests
  • http://ip##fo.io/country
  • http://ip##fo.io/ip
  • http://18.##6.184.180/windows/Setup.exe
  • http://18.##6.184.180/windows/f/Setup.exe
  • http://re#####.adexpertsmedia.com/rest/trackinstall?ad##############################################################################################################################
  • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
  • http://lo#.#omlab.com/playerplus/install?bu###########################################################################################################################
  • 'ip##fo.io':443
  • 'ip####ityscore.com':443
  • 'script.google.com':443
  • 'cd##.gomlab.com':443
  • UDP
    • DNS ASK ip##fo.io
    • DNS ASK ip####ityscore.com
    • DNS ASK script.google.com
    • DNS ASK re#####.adexpertsmedia.com
    • DNS ASK microsoft.com
    • DNS ASK cd##.gomlab.com
    • DNS ASK lo#.#omlab.com
    Miscellaneous
    Searches for the following windows
    • ClassName: 'RECV_CLASS' WindowName: 'RECV'
    • ClassName: '#32770' WindowName: ''
    • ClassName: 'GomPlayerPlus32_2.x' WindowName: ''
    • ClassName: 'GomMgr1.x' WindowName: ''
    • ClassName: 'GomWiz1.x' WindowName: ''
    Creates and executes the following
    • '%TEMP%\is-qdmoo.tmp\<File name>.tmp' /SL5="$5023E,165053,83456,<Full path to file>"
    • '%TEMP%\is-19vii.tmp\setup.exe' /Verysilent
    • '%TEMP%\is-knk89.tmp\setup.tmp' /SL5="$20262,138429,56832,%TEMP%\is-19VII.tmp\Setup.exe" /Verysilent
    • '%TEMP%\is-tbl2g.tmp\setup.exe' /S
    • '%ProgramFiles(x86)%\gom\gomplayerplus\killgom.exe' GOM.EXE
    • '%ProgramFiles(x86)%\gom\gomplayerplus\killgom.exe' popup.EXE
    • '%ProgramFiles(x86)%\gom\gomplayerplus\gom.exe' /RegServer
    • '%ProgramFiles(x86)%\gom\gomplayerplus\gom.exe' /showicon
    • '%ProgramFiles(x86)%\gom\gomplayerplus\grlauncher.exe' <GRLAUNCHER_PARAM Command = 'checkversion' Lang = 'eng' AgentName = 'GOMPlayer' ProgramID = 'GOMPLAYERPLUS(x86)' ForceCheck = '0' CheckMinorVersion = '1' CheckBuildVersion = '1' CheckDisabled ...
    • '%ProgramFiles(x86)%\gom\gomplayerplus\gom.exe' /regassoc
    Executes the following
    • '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\GOM\GOMPlayerPlus\VSUtil.dll"

    Curing recommendations

    1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
    2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
    Free trial

    One month (no registration) or three months (registration and renewal discount)

    Download Dr.Web

    Download by serial number

    Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

    Free trial

    One month (no registration) or three months (registration and renewal discount)

    Download Dr.Web

    Download by serial number

    After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

    Free trial

    One month (no registration) or three months (registration and renewal discount)

    Download Dr.Web

    Download by serial number

    1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
    2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
      • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
      • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
      • Switch off your device and turn it on as normal.

    Find out more about Dr.Web for Android

    The Russian developer of Dr.Web anti-viruses
    Doctor Web has been developing anti-virus software since 1992
    Dr.Web is trusted by users around the world in 200+ countries
    The company has delivered an anti-virus as a service since 2007
    24/7 tech support

    Dr.Web © Doctor Web
    2003 — 2020

    Doctor Web is the Russian developer of Dr.Web anti-virus software. Dr.Web anti-virus software has been developed since 1992.

    2-12А, 3rd street Yamskogo polya, Moscow, Russia, 125124