Adware.FTDownloader
Posted: July 16, 2013
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Ranking: | 8,613 |
|---|---|
| Threat Level: | 2/10 |
| Infected PCs: | 37,691 |
| First Seen: | July 16, 2013 |
|---|---|
| Last Seen: | January 20, 2025 |
| OS(es) Affected: | Windows |
As a file manager that offers more management than most people would want, FTDownloader is classified as a Potentially Unwanted Program, due to its habit of bundling itself with adware programs that may make unusual browser modifications, turning into a disadvantage for your Web-browsing experience. Bundled software with FTDownloader may include adware, which will display advertisements either via pop-up windows or by injecting the advertisements straight into your Web browser. No matter what symptoms you see along with FTDownloader, removing FTDownloader and its associated software with a robust anti-malware scan is safer for your PC than letting its questionable settings changes linger without question.
FTDownloader: Downloading More Than Just the Files You Wanted....
FTDownloader is marketed as a free download manager for FilesTube.com (a general-purpose search engine for popular file hosts), claiming that FTDownloader can multiply the speed and even the stability of your download rates by up to five times. Although FTDownloader does include download-managing features, malware researchers haven't verified any kind of quality of life improvement with respect to its download rates or stability, both of which are determined by various elements that are out of the control of any individual download-managing application.
FTDownloader also is often considered adware, itself, due to being bundled with various adware add-ons that change your Web browser's settings. These browser add-ons have been known to use randomly-named file components that make them difficult to identify, and, in some cases, even block the user's ability to make other browser changes. Of course, malware researchers have, unsurprisingly, connected FTDownloader's bundled adware to the loading of various advertisements, which may cause both performance and security problems for your PC.
Shutting the Tube that's Delivering You Advertisements Along with Files
There's no need to use FTDownloader to reach the actual Filestube.com website, or any of the other file-sharing sites under its theoretical accessibility-improving umbrella. FTDownloader may not be a threat, but its questionable marketing claims and tendency to value its control over your browser more than the services FTDownloader provides make FTDownloader less than a net benefit to your computer. Deleting FTDownloader and the adware that's installed through FTDownloader should be considered without much forethought as your best response to FTDownloader.
Chrome and Firefox both may be susceptible to the browser changes enacted through FTDownloader bundles. However, when these two browsers are affected, Internet Explorer rarely is very far behind them. The inherent problems that come with any reasonable degree of Internet usage – such as exposure to adware and programs with bundled installers like FTDownloader – will continue to need robust, all-inclusive security mechanisms to thwart and keep your PC, as a whole, safe and optimized.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-updater.exe
File name: FTdownloader V4.0-updater.exeSize: 361.98 KB (361984 bytes)
MD5: 75f454917b3230f257f7cf4ed93de1e2
Detection count: 4,605
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-updater.exe
Group: Malware file
Last Updated: April 17, 2022
C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-codedownloader.exe
File name: FTdownloader V4.0-codedownloader.exeSize: 476.67 KB (476672 bytes)
MD5: d2e0357cd1da4358fd5135e61e0fccd0
Detection count: 4,267
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-codedownloader.exe
Group: Malware file
Last Updated: June 25, 2022
C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-bho.dll
File name: FTdownloader V4.0-bho.dllSize: 748.03 KB (748032 bytes)
MD5: c8369145d8c286431c8db69da5825522
Detection count: 1,696
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-bho.dll
Group: Malware file
Last Updated: January 19, 2022
%PROGRAMFILES%\ftdownloader v4.0\ftdownloader v4.0-bg.exe
File name: ftdownloader v4.0-bg.exeSize: 896 KB (896000 bytes)
MD5: 31e72869e0a8155c87956256e268fcb7
Detection count: 379
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ftdownloader v4.0
Group: Malware file
Last Updated: June 11, 2020
C:\Program Files (x86)\FTdownloader V4.0\Uninstall.exe
File name: Uninstall.exeSize: 115.71 KB (115712 bytes)
MD5: 1c84b8814f875aeae91f98df57ba0dea
Detection count: 136
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\FTdownloader V4.0\Uninstall.exe
Group: Malware file
Last Updated: October 13, 2022
%PROGRAMFILES%\FTdownloader V6.0\FTdownloader V6.0-bho.dll
File name: FTdownloader V6.0-bho.dllSize: 636.92 KB (636928 bytes)
MD5: 5d0a90347f93c3413b4d673f6ec49671
Detection count: 98
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES(x86)%\FTdownloader V9.0\FTdownloader V9.0-bho64.dll
File name: FTdownloader V9.0-bho64.dllSize: 964.6 KB (964608 bytes)
MD5: 9cf9bfe85bfbc47d06730a4219f67f19
Detection count: 25
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\FTdownloader V9.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES%\FTDownloader.com\uninst.exe
File name: uninst.exeSize: 55.71 KB (55718 bytes)
MD5: acc98e2efe1e33a04bca09f339d50017
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTDownloader.com
Group: Malware file
Last Updated: July 16, 2013
%PROGRAMFILES(x86)%\FTdownloader V6.0\FTdownloader V6.0-bho64.dll
File name: FTdownloader V6.0-bho64.dllSize: 969.21 KB (969216 bytes)
MD5: a6a633cfaa3e989bdfcec958c65d3700
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%USERPROFILE%\My Documents\Downloads\FTDownloader_setup.exe
File name: FTDownloader_setup.exeSize: 471.06 KB (471062 bytes)
MD5: c8b1cc64ce86c239a54adfe1a9c73ac8
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\My Documents\Downloads
Group: Malware file
Last Updated: April 9, 2014
C:\Program Files (x86)\FTdownloader V7.0\FTdownloader V7.0-buttonutil64.exe
File name: FTdownloader V7.0-buttonutil64.exeSize: 429.56 KB (429568 bytes)
MD5: cc24f062a46b35ec9d64a0097b2f7aa4
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\FTdownloader V7.0\FTdownloader V7.0-buttonutil64.exe
Group: Malware file
Last Updated: April 16, 2021
%PROGRAMFILES%\FTdownloader V6.0\FTdownloader V6.0-updater.exe
File name: FTdownloader V6.0-updater.exeSize: 522.26 KB (522260 bytes)
MD5: b04d6602a4c447023221ea097c3ecc81
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES%\FTdownloader V6.0\FTdownloader V6.0-firefoxinstaller.exe
File name: FTdownloader V6.0-firefoxinstaller.exeSize: 1 MB (1000355 bytes)
MD5: 3c83b93cf0f11db9597a78fe079753e2
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FTdownloader V6.0
Group: Malware file
Last Updated: April 9, 2014
%PROGRAMFILES%\ftdownloader v6.0\ftdownloader v6.0-bg.exe
File name: ftdownloader v6.0-bg.exeSize: 838.07 KB (838070 bytes)
MD5: fdcb8df27f5816b687aaad28a77f3852
Detection count: 4
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ftdownloader v6.0
Group: Malware file
Last Updated: April 9, 2014
More files
Registry Modifications
The following newly produced Registry Values are:
CLSID{11111111-1111-1111-1111-110311551174}{11111111-1111-1111-1111-110411511167}{11111111-1111-1111-1111-110511151181}{22222222-2222-2222-2222-220322552274}{22222222-2222-2222-2222-220422512267}{44444444-4444-4444-4444-440344554474}{44444444-4444-4444-4444-440444514467}{44444444-4444-4444-4444-440544154481}{55555555-5555-5555-5555-550355555574}{55555555-5555-5555-5555-550455515567}{55555555-5555-5555-5555-550555155581}{66666666-6666-6666-6666-660366556674}{66666666-6666-6666-6666-660466516667}{66666666-6666-6666-6666-660566156681}File name without pathFTDownloader.lnkHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\FTdownloader V4.0Software\AppDataLow\Software\FTdownloader V6.0Software\AppDataLow\Software\FTdownloader V9.0SOFTWARE\Classes\CrossriderApp0035574.BHOSOFTWARE\Classes\CrossriderApp0035574.SandboxSOFTWARE\Classes\CrossriderApp0045167.BHOSOFTWARE\Classes\CrossriderApp0045167.BHO.1SOFTWARE\Classes\CrossriderApp0045167.SandboxSOFTWARE\Classes\CrossriderApp0045167.Sandbox.1SOFTWARE\Classes\CrossriderApp0051581.BHOSOFTWARE\Classes\CrossriderApp0051581.BHO.1SOFTWARE\Classes\CrossriderApp0051581.SandboxSOFTWARE\Classes\CrossriderApp0051581.Sandbox.1SOFTWARE\Classes\FTDownloaderSoftware\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V6.0Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V9.0SOFTWARE\FTdownloader V4.0SOFTWARE\FTdownloader V6.0SOFTWARE\FTdownloader V9.0Software\InstalledBrowserExtensions\installdaddySoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411511167}Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511151181}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{318da107-1f11-4428-b54d-9c3c1abb829a}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37230f23-eecb-450e-85ff-22da2a19152d}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38185b47-546c-4c7c-a69f-7a23e18a4a6e}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a386382e-0559-4a78-8fb3-e07303590ae0}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eb59b107-35ea-4e8e-bb7a-35c18644db46}SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-updaterSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511151181}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511151181}SOFTWARE\Wow6432Node\FTdownloader V4.0SOFTWARE\Wow6432Node\FTdownloader V6.0SOFTWARE\Wow6432Node\FTdownloader V9.0SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\FTdownloader V4.0-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}FTdownloader V4.0FTdownloader V6.0FTdownloader V9.0
CLSID{11111111-1111-1111-1111-110311551174}{11111111-1111-1111-1111-110411511167}{11111111-1111-1111-1111-110511151181}{22222222-2222-2222-2222-220322552274}{22222222-2222-2222-2222-220422512267}{44444444-4444-4444-4444-440344554474}{44444444-4444-4444-4444-440444514467}{44444444-4444-4444-4444-440544154481}{55555555-5555-5555-5555-550355555574}{55555555-5555-5555-5555-550455515567}{55555555-5555-5555-5555-550555155581}{66666666-6666-6666-6666-660366556674}{66666666-6666-6666-6666-660466516667}{66666666-6666-6666-6666-660566156681}File name without pathFTDownloader.lnkHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\FTdownloader V4.0Software\AppDataLow\Software\FTdownloader V6.0Software\AppDataLow\Software\FTdownloader V9.0SOFTWARE\Classes\CrossriderApp0035574.BHOSOFTWARE\Classes\CrossriderApp0035574.SandboxSOFTWARE\Classes\CrossriderApp0045167.BHOSOFTWARE\Classes\CrossriderApp0045167.BHO.1SOFTWARE\Classes\CrossriderApp0045167.SandboxSOFTWARE\Classes\CrossriderApp0045167.Sandbox.1SOFTWARE\Classes\CrossriderApp0051581.BHOSOFTWARE\Classes\CrossriderApp0051581.BHO.1SOFTWARE\Classes\CrossriderApp0051581.SandboxSOFTWARE\Classes\CrossriderApp0051581.Sandbox.1SOFTWARE\Classes\FTDownloaderSoftware\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V6.0Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V9.0SOFTWARE\FTdownloader V4.0SOFTWARE\FTdownloader V6.0SOFTWARE\FTdownloader V9.0Software\InstalledBrowserExtensions\installdaddySoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411511167}Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511151181}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{318da107-1f11-4428-b54d-9c3c1abb829a}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37230f23-eecb-450e-85ff-22da2a19152d}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38185b47-546c-4c7c-a69f-7a23e18a4a6e}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a386382e-0559-4a78-8fb3-e07303590ae0}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eb59b107-35ea-4e8e-bb7a-35c18644db46}SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-updaterSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511151181}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511151181}SOFTWARE\Wow6432Node\FTdownloader V4.0SOFTWARE\Wow6432Node\FTdownloader V6.0SOFTWARE\Wow6432Node\FTdownloader V9.0SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\FTdownloader V4.0-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}FTdownloader V4.0FTdownloader V6.0FTdownloader V9.0
Additional Information
The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\FTDownloader.com%PROGRAMFILES%\FTdownloader V9.0%PROGRAMFILES(x86)%\FTdownloader V9.0%ProgramFiles%\FTDownloader.com%ProgramFiles%\FTdownloader V4.0%ProgramFiles%\FTdownloader V6.0%ProgramFiles(x86)%\FTDownloader.com%ProgramFiles(x86)%\FTdownloader V4.0%ProgramFiles(x86)%\FTdownloader V6.0%USERPROFILE%\AppData\LocalLow\FTdownloader V9.0%UserProfile%\Local Settings\Application Data\Cool_Mirage%appdata%\FTdownloader V9.0
The following URL's were detected:
FT Downloaderftd@ftd.com
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.