Immediately disconnect your Ethernet cable or turn off Wi-Fi. This stops the malware from communicating with the Command & Control (C2) server and prevents it from downloading more payloads or uploading your stolen data.

Booting into Safe Mode loads Windows with only essential drivers, preventing the malware from actively running and locking its files.

Some older versions of players like GOM Player, KMPlayer, or even custom builds of VLC have used webplayerexe to handle embedded YouTube or streaming content. “UNV” could indicate a university or development build.

Editing the registry can harm your system if done incorrectly. Back up your registry first.