What is galaplayer?

Answer 1

It is media player used by those who created it to install unwanted software in user's computers. It seems that it's spreading through file sharing communities using a fake video file which when you try to play it asks for galaplayer and is playing a short thing with the address of their website where it can be downloaded. The video file used for this purpose is named with very attractive names like "Ice Age 3" or similar something that most people want but is hard to find or even not lunched on the market. Programs that can analyse a video file reports the content as "714 MB unneeded bytes at the end of file" which means that from my example having a 717 MB file with 714 MB unneeded there is less than 3MB video which contains that advertising with their website. I've scanned the file with several antivirus and spyware, malware programs and none found anything but Malwarebytes' which found theRogue.Installer threat. I've uploaded the file to www.threatexpert.com which is a virtual machine for testing files to find possible threats and behavior analysis and the report was strange considering that I know for sure it contains threats. In the report the installer pop-up window is shown with a strange message "Downloaded package can not be found. Please try again shortly or contact support." which make me ask myself where is the downloaded package because I uploaded the exact file to threatexpert ?

Conclusion !

Don't install or use this program, always scan downloaded files (before use) with several antimalware programs and not everything that's free is good, actually I might say most freeware's come with spyware / malware.