Adware.FTDownloader
Posted: July 16, 2013
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Ranking: | 6,416 |
|---|---|
| Threat Level: | 2/10 |
| Infected PCs: | 37,385 |
| First Seen: | July 16, 2013 |
|---|---|
| Last Seen: | October 15, 2023 |
| OS(es) Affected: | Windows |
As a file manager that offers more management than most people would want, FTDownloader is classified as a Potentially Unwanted Program, due to its habit of bundling itself with adware programs that may make unusual browser modifications, turning into a disadvantage for your Web-browsing experience. Bundled software with FTDownloader may include adware, which will display advertisements either via pop-up windows or by injecting the advertisements straight into your Web browser. No matter what symptoms you see along with FTDownloader, removing FTDownloader and its associated software with a robust anti-malware scan is safer for your PC than letting its questionable settings changes linger without question.
FTDownloader: Downloading More Than Just the Files You Wanted....
FTDownloader is marketed as a free download manager for FilesTube.com (a general-purpose search engine for popular file hosts), claiming that FTDownloader can multiply the speed and even the stability of your download rates by up to five times. Although FTDownloader does include download-managing features, malware researchers haven't verified any kind of quality of life improvement with respect to its download rates or stability, both of which are determined by various elements that are out of the control of any individual download-managing application.
FTDownloader also is often considered adware, itself, due to being bundled with various adware add-ons that change your Web browser's settings. These browser add-ons have been known to use randomly-named file components that make them difficult to identify, and, in some cases, even block the user's ability to make other browser changes. Of course, malware researchers have, unsurprisingly, connected FTDownloader's bundled adware to the loading of various advertisements, which may cause both performance and security problems for your PC.
Shutting the Tube that's Delivering You Advertisements Along with Files
There's no need to use FTDownloader to reach the actual Filestube.com website, or any of the other file-sharing sites under its theoretical accessibility-improving umbrella. FTDownloader may not be a threat, but its questionable marketing claims and tendency to value its control over your browser more than the services FTDownloader provides make FTDownloader less than a net benefit to your computer. Deleting FTDownloader and the adware that's installed through FTDownloader should be considered without much forethought as your best response to FTDownloader.
Chrome and Firefox both may be susceptible to the browser changes enacted through FTDownloader bundles. However, when these two browsers are affected, Internet Explorer rarely is very far behind them. The inherent problems that come with any reasonable degree of Internet usage – such as exposure to adware and programs with bundled installers like FTDownloader – will continue to need robust, all-inclusive security mechanisms to thwart and keep your PC, as a whole, safe and optimized.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%PROGRAMFILES(x86)%\FTdownloader V6.0\FTdownloader V6.0-bho64.dll
File name: FTdownloader V6.0-bho64.dllSize: 965.12 KB (965120 bytes)
MD5: c426956d61f7f3197e032f45ea0a8cf6
Detection count: 222
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\FTdownloader V6.0
Group: Malware file
Last Updated: November 19, 2018
%PROGRAMFILES(x86)%\FTdownloader V6.0\FTdownloader V6.0-bho64.dll
File name: FTdownloader V6.0-bho64.dllSize: 962.04 KB (962048 bytes)
MD5: 081e8a11864a1080d466f1ba63c66e10
Detection count: 192
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES%\FTdownloader V6.0\FTdownloader V6.0-bho.dll
File name: FTdownloader V6.0-bho.dllSize: 636.92 KB (636928 bytes)
MD5: 5d0a90347f93c3413b4d673f6ec49671
Detection count: 98
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES(x86)%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: c03f20b6aba917d47175d2d69b86d85c
Detection count: 92
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES(x86)%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: c4d0697a4c7fbd0677059d5e96460071
Detection count: 81
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES(x86)%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: fd35fd31a181ccb271e775a21171c970
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: 244f2731143543b9d3e7c91a0dd9de83
Detection count: 72
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: 2aa8c24b9491ded6f68455b6636804b7
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: c1aa38b79934c7621dc0eca70a0d43ff
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES(x86)%\FTdownloader V9.0\FTdownloader V9.0-bho64.dll
File name: FTdownloader V9.0-bho64.dllSize: 964.6 KB (964608 bytes)
MD5: 9cf9bfe85bfbc47d06730a4219f67f19
Detection count: 25
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\FTdownloader V9.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES(x86)%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: 10e00e9234e9ab44edd47f769a02016f
Detection count: 24
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: acc98e2efe1e33a04bca09f339d50017
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES(x86)%\FTdownloader V6.0\FTdownloader V6.0-bho64.dll
File name: FTdownloader V6.0-bho64.dllSize: 969.21 KB (969216 bytes)
MD5: a6a633cfaa3e989bdfcec958c65d3700
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%USERPROFILE%\My Documents\Downloads\FTDownloader_setup.exe
File name: FTDownloader_setup.exeSize: 471.06 KB (471062 bytes)
MD5: c8b1cc64ce86c239a54adfe1a9c73ac8
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\My Documents\Downloads
Group: Malware file
Last Updated: April 9, 2014
C:\Program Files (x86)\FTdownloader V7.0\FTdownloader V7.0-buttonutil64.exe
File name: FTdownloader V7.0-buttonutil64.exeSize: 429.56 KB (429568 bytes)
MD5: cc24f062a46b35ec9d64a0097b2f7aa4
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\FTdownloader V7.0\FTdownloader V7.0-buttonutil64.exe
Group: Malware file
Last Updated: April 16, 2021
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: 9272f680aa1ab5148678440e0203d00f
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES%\FTdownloader V6.0\FTdownloader V6.0-updater.exe
File name: FTdownloader V6.0-updater.exeSize: 522.26 KB (522260 bytes)
MD5: b04d6602a4c447023221ea097c3ecc81
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES%\FTdownloader V6.0\FTdownloader V6.0-firefoxinstaller.exe
File name: FTdownloader V6.0-firefoxinstaller.exeSize: 1 MB (1000355 bytes)
MD5: 3c83b93cf0f11db9597a78fe079753e2
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: c7815f2fc62c4a471a13849a2968ac44
Detection count: 4
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES%\ftdownloader v6.0\ftdownloader v6.0-bg.exe
File name: ftdownloader v6.0-bg.exeSize: 838.07 KB (838070 bytes)
MD5: fdcb8df27f5816b687aaad28a77f3852
Detection count: 4
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ftdownloader v6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES(x86)%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: 650f5f464c5d3057e9a6a894ef58dd33
Detection count: 2
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: bd6eef7ad5ed2430553ee7c8376a66f9
Detection count: 1
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
More files
Registry Modifications
The following newly produced Registry Values are:
CLSID{11111111-1111-1111-1111-110311551174}{11111111-1111-1111-1111-110411511167}{11111111-1111-1111-1111-110511151181}{22222222-2222-2222-2222-220322552274}{22222222-2222-2222-2222-220422512267}{44444444-4444-4444-4444-440344554474}{44444444-4444-4444-4444-440444514467}{44444444-4444-4444-4444-440544154481}{55555555-5555-5555-5555-550355555574}{55555555-5555-5555-5555-550455515567}{55555555-5555-5555-5555-550555155581}{66666666-6666-6666-6666-660366556674}{66666666-6666-6666-6666-660466516667}{66666666-6666-6666-6666-660566156681}File name without pathFTDownloader.lnkHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\FTdownloader V4.0Software\AppDataLow\Software\FTdownloader V6.0Software\AppDataLow\Software\FTdownloader V9.0SOFTWARE\Classes\CrossriderApp0035574.BHOSOFTWARE\Classes\CrossriderApp0035574.SandboxSOFTWARE\Classes\CrossriderApp0045167.BHOSOFTWARE\Classes\CrossriderApp0045167.BHO.1SOFTWARE\Classes\CrossriderApp0045167.SandboxSOFTWARE\Classes\CrossriderApp0045167.Sandbox.1SOFTWARE\Classes\CrossriderApp0051581.BHOSOFTWARE\Classes\CrossriderApp0051581.BHO.1SOFTWARE\Classes\CrossriderApp0051581.SandboxSOFTWARE\Classes\CrossriderApp0051581.Sandbox.1SOFTWARE\Classes\FTDownloaderSoftware\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V6.0Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V9.0SOFTWARE\FTdownloader V4.0SOFTWARE\FTdownloader V6.0SOFTWARE\FTdownloader V9.0Software\InstalledBrowserExtensions\installdaddySoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411511167}Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511151181}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{318da107-1f11-4428-b54d-9c3c1abb829a}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37230f23-eecb-450e-85ff-22da2a19152d}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38185b47-546c-4c7c-a69f-7a23e18a4a6e}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a386382e-0559-4a78-8fb3-e07303590ae0}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eb59b107-35ea-4e8e-bb7a-35c18644db46}SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-updaterSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511151181}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511151181}SOFTWARE\Wow6432Node\FTdownloader V4.0SOFTWARE\Wow6432Node\FTdownloader V6.0SOFTWARE\Wow6432Node\FTdownloader V9.0SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\FTdownloader V4.0-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}FTdownloader V4.0FTdownloader V6.0FTdownloader V9.0
CLSID{11111111-1111-1111-1111-110311551174}{11111111-1111-1111-1111-110411511167}{11111111-1111-1111-1111-110511151181}{22222222-2222-2222-2222-220322552274}{22222222-2222-2222-2222-220422512267}{44444444-4444-4444-4444-440344554474}{44444444-4444-4444-4444-440444514467}{44444444-4444-4444-4444-440544154481}{55555555-5555-5555-5555-550355555574}{55555555-5555-5555-5555-550455515567}{55555555-5555-5555-5555-550555155581}{66666666-6666-6666-6666-660366556674}{66666666-6666-6666-6666-660466516667}{66666666-6666-6666-6666-660566156681}File name without pathFTDownloader.lnkHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\FTdownloader V4.0Software\AppDataLow\Software\FTdownloader V6.0Software\AppDataLow\Software\FTdownloader V9.0SOFTWARE\Classes\CrossriderApp0035574.BHOSOFTWARE\Classes\CrossriderApp0035574.SandboxSOFTWARE\Classes\CrossriderApp0045167.BHOSOFTWARE\Classes\CrossriderApp0045167.BHO.1SOFTWARE\Classes\CrossriderApp0045167.SandboxSOFTWARE\Classes\CrossriderApp0045167.Sandbox.1SOFTWARE\Classes\CrossriderApp0051581.BHOSOFTWARE\Classes\CrossriderApp0051581.BHO.1SOFTWARE\Classes\CrossriderApp0051581.SandboxSOFTWARE\Classes\CrossriderApp0051581.Sandbox.1SOFTWARE\Classes\FTDownloaderSoftware\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V6.0Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V9.0SOFTWARE\FTdownloader V4.0SOFTWARE\FTdownloader V6.0SOFTWARE\FTdownloader V9.0Software\InstalledBrowserExtensions\installdaddySoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411511167}Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511151181}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{318da107-1f11-4428-b54d-9c3c1abb829a}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37230f23-eecb-450e-85ff-22da2a19152d}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38185b47-546c-4c7c-a69f-7a23e18a4a6e}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a386382e-0559-4a78-8fb3-e07303590ae0}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eb59b107-35ea-4e8e-bb7a-35c18644db46}SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-updaterSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511151181}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511151181}SOFTWARE\Wow6432Node\FTdownloader V4.0SOFTWARE\Wow6432Node\FTdownloader V6.0SOFTWARE\Wow6432Node\FTdownloader V9.0SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\FTdownloader V4.0-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}FTdownloader V4.0FTdownloader V6.0FTdownloader V9.0
Additional Information
The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\FTDownloader.com%PROGRAMFILES%\FTdownloader V9.0%PROGRAMFILES(x86)%\FTdownloader V9.0%ProgramFiles%\FTDownloader.com%ProgramFiles%\FTdownloader V4.0%ProgramFiles%\FTdownloader V6.0%ProgramFiles(x86)%\FTDownloader.com%ProgramFiles(x86)%\FTdownloader V4.0%ProgramFiles(x86)%\FTdownloader V6.0%USERPROFILE%\AppData\LocalLow\FTdownloader V9.0%UserProfile%\Local Settings\Application Data\Cool_Mirage%appdata%\FTdownloader V9.0
The following URL's were detected:
FT Downloaderftd@ftd.com
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.