Home Malware Programs Potentially Unwanted Programs (PUPs) Fast Free Converter

Fast Free Converter

Posted: October 18, 2013

Threat Metric

Ranking: 12,257
Threat Level: 2/10
Infected PCs: 239,149
First Seen: March 5, 2013
Last Seen: March 10, 2025
OS(es) Affected: Windows

The Fast Free Converter is a video file converter that inexplicably markets itself through third party bundles that include distributions of popular software, such as Daemon Tools or Flash Player. While, as far as malware researchers have been able to conclude, the Fast Free Converter doesn't have any functions that would endanger your computer, software that uses these types of disingenuous installation methods usually should be considered undesirable for your computer. Like other Potentially Unwanted Programs, you should delete the Fast Free Converter with a good anti-malware product – particularly since the Fast Free Converter often is installed along with several other PUPs, as well.

When Free Isn't Always Good for Your Computer

The Fast Free Converter claims to offer file-converting features for both audio and video files, although malware experts only have confirmed the latter, so far. For reasons known only to its developers, the Fast Free Converter also makes the usual move of being installed in the format of a typical browser add-on despite lacking any Web-browsing features that would make such a format necessary. Other than some potentially fraudulent marketing claims, malware researchers haven't found any major problems with the Fast Free Converter, as long as you look at the program independently of its distribution methods.

Depressingly, the Fast Free Converter's primary model for distribution is even worse than its file-conversion functions and appears to rely on bundles with unrelated programs. Currently, the Fast Free Converter has been seen being distributed with unauthorized versions of Adobe's Flash Player and the Daemon Tools program. Although the Fast Free Converter does offer to allow you to opt out, these programs don't normally include the Fast Free Converter, and many careless updaters may install the Fast Free Converter by mistake when clicking through the process. Malware researchers also have seen the Fast Free Converter being installed along with other PUPs, currently including:

Converting Your Computer out of Putting Up with the Fast Free Converter

While the Fast Free Converter is not a likely source of direct harm to your computer, allowing PUPs to remain on your computer may harm the overall performance or cause an inadvertent degradation of your Web-browsing security. Programs that install themselves in suspicious circumstances and tend to try to prevent their removal – just like the Fast Free Converter – always should be deleted with appropriate anti-malware tools, and SpywareRemove.com malware researchers note that any minimally competent brand of anti-malware product should be able to delete the Fast Free Converter with zero problems.

More than anything else, the Fast Free Converter is an example of the problems that come with trusting downloads from unofficial sources. Updates for major programs (Adobe's Flash Player, JavaScript, etc.) often are exploited as vehicles for the distribution of both PUPs and high-level PC threats – albeit almost always by third parties. If you see an advertisement or other non-Adobe source asking you to update Flash, you should pause and consider whether or not this 'update' could include the Fast Free Converter and other browser add-ons with it.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%TEMP%\pkg_15232719d0\FastFreeConverter_W3I.exe File name: FastFreeConverter_W3I.exe
Size: 1.72 MB (1724296 bytes)
MD5: deeb96ae231901affe3329d50c448764
Detection count: 1,773
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\pkg_15232719d0
Group: Malware file
Last Updated: December 9, 2013
%TEMP%\pkg_162e1438c0\FastFreeConverter_FastFreeConverter2.exe File name: FastFreeConverter_FastFreeConverter2.exe
Size: 1.54 MB (1541432 bytes)
MD5: 7dc8b7f8d9337693cc05bdcbd01078fe
Detection count: 1,632
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\pkg_162e1438c0
Group: Malware file
Last Updated: December 9, 2013
C:\Qoobox\Quarantine\C\Program Files (x86)\FASTFR~1\FASTFR~1\FASTfr~1.dll.vir File name: FASTfr~1.dll.vir
Size: 549.37 KB (549376 bytes)
MD5: e8df161ff57b42cd5e142bcec38a387a
Detection count: 717
Mime Type: unknown/vir
Path: C:\Qoobox\Quarantine\C\Program Files (x86)\FASTFR~1\FASTFR~1\FASTfr~1.dll.vir
Group: Malware file
Last Updated: January 11, 2021
%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update_ff21[1].exe File name: update_ff21[1].exe
Size: 656.46 KB (656467 bytes)
MD5: 94b26641a780d55097c6b04a015a54e7
Detection count: 361
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update_ff21[1].exe
Group: Malware file
Last Updated: March 10, 2025
%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update_chrome27[1].exe File name: update_chrome27[1].exe
Size: 163.07 KB (163071 bytes)
MD5: d37c4dd3443fd8b1f128df58008a1c69
Detection count: 340
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update_chrome27[1].exe
Group: Malware file
Last Updated: March 10, 2025
%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VFYSPB0A\updater_update_1.0.4[1].exe File name: updater_update_1.0.4[1].exe
Size: 199.98 KB (199981 bytes)
MD5: 2a2860ead724e940c337f708797f7130
Detection count: 157
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VFYSPB0A\updater_update_1.0.4[1].exe
Group: Malware file
Last Updated: April 16, 2023
%TEMP%\FastFreeConverterUpdt_v4.0.exe File name: FastFreeConverterUpdt_v4.0.exe
Size: 211.14 KB (211148 bytes)
MD5: e17f04656f5d302d1e318fcb13eb0623
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 9, 2013
C:\Users\<username>\Desktop\Geek Squad Data BackUp\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\PUOHTUCR\instextensions_4.4[1].exe File name: instextensions_4.4[1].exe
Size: 1.17 MB (1174402 bytes)
MD5: 52bdc9af5e456cb446004bd9aceded91
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\Geek Squad Data BackUp\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\PUOHTUCR\instextensions_4.4[1].exe
Group: Malware file
Last Updated: July 4, 2023
%TEMP%\FastFreeConverterUpdt_v4.1.exe File name: FastFreeConverterUpdt_v4.1.exe
Size: 147.43 KB (147436 bytes)
MD5: e1935924e3fba17920c9908e2ac6d5ea
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 9, 2013
C:\Users\<username>\Desktop\backup\Users\<username>\AppData\Local\Temp\FastFreeConverter_Somoto2.exe File name: FastFreeConverter_Somoto2.exe
Size: 1.4 MB (1407592 bytes)
MD5: 9b6476d87dfedfb3b5a1907e9e89bd32
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\backup\Users\<username>\AppData\Local\Temp\FastFreeConverter_Somoto2.exe
Group: Malware file
Last Updated: September 25, 2024
%TEMP%\fastfreeconverter_freefrog_channel_adknowledge_and_filetypehelper.exe File name: fastfreeconverter_freefrog_channel_adknowledge_and_filetypehelper.exe
Size: 1.64 MB (1645336 bytes)
MD5: 372d8989fafd53d678fd905a2d433eb7
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: February 15, 2020
%TEMP%\fastfreeconverter_amone2.exe File name: fastfreeconverter_amone2.exe
Size: 1.4 MB (1407296 bytes)
MD5: 6654214c9360528552b90e339a7e6abf
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: September 25, 2024
%TEMP%\FastFreeConverter_Amone.exe File name: FastFreeConverter_Amone.exe
Size: 1.72 MB (1724384 bytes)
MD5: ee749ddbc8a2d1ba652c960557af072a
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 9, 2013
C:\Users\<username>\AppData\Local\Temp\FastFreeConverter_Somoto.exe File name: FastFreeConverter_Somoto.exe
Size: 1.72 MB (1723968 bytes)
MD5: a3830f40b121b04397be2b1c6475fc30
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\FastFreeConverter_Somoto.exe
Group: Malware file
Last Updated: December 22, 2021
%PROGRAMFILES%\Fast Free Converter\FastFreeConverterUpdt.exe File name: FastFreeConverterUpdt.exe
Size: 169.98 KB (169984 bytes)
MD5: 36e6e751876221b6b6dc78863d2783f1
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Fast Free Converter
Group: Malware file
Last Updated: December 9, 2013

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{F5580E24-8416-4DFD-90B3-078D4EDF4FCB}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Fast Free ConverterSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\FastFreeConverter.exeSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F5580E24-8416-4DFD-90B3-078D4EDF4FCB}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F5580E24-8416-4DFD-90B3-078D4EDF4FCB}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F5580E24-8416-4DFD-90B3-078D4EDF4FCB}SOFTWARE\Mozilla\Firefox\Extensions\extension@FastFreeConverter.comSOFTWARE\Wow6432Node\Fast Free ConverterSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\FastFreeConverter.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F5580E24-8416-4DFD-90B3-078D4EDF4FCB}SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\extension@FastFreeConverter.comSOFTWARE\Wow6432Node\ZUpdater\FastFreeConverterUpdt.exeSOFTWARE\ZUpdater\FastFreeConverterUpdt.exeSYSTEM\ControlSet001\services\FastFreeConverterUpdtSYSTEM\CurrentControlSet\services\FastFreeConverterUpdtHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Fast Free Converter

Additional Information

The following directories were created:
%PROGRAMFILES%\Fast Free Converter%PROGRAMFILES(X86)%\Fast Free Converter%USERPROFILE%\AppData\LocalLow\Fast Free Converter
The following URL's were detected:
Fast Free ConverterFastFreeConverter
Loading...