Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Free Youtube Downloader

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 32,372 posts
Content is republished with permission from Malwarebytes.

What is Free Youtube Downloader?

The Malwarebytes research team has determined that Free Youtube Downloader is a Tech Support Scam. These so-called "Tech Support Scammers" try to trick you into calling their phone number for various reasons, all of which turn out to be fraudulent in the end.

How do I know if my computer is affected by Free Youtube Downloader?

You may see these icons on your Desktop and in your Taskbar:

icons.png

and this entry in your list of installed programs:

warning4.png

How did Free Youtube Downloader get on my computer?

Tech Support Scammers use different methods for distributing themselves. This particular one was offered as a free Youtube downloader.
But it only downloads a file that will produce a fake Windows Activation screen with the Tech Support Scammers number.

warning1.png

How do I remove Free Youtube Downloader?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Free Youtube Downloader?
  • No, Malwarebytes' Anti-Malware removes Free Youtube Downloader completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Tech Supprt Scam.

protection1.png


Technical details for experts

You may see these entries in FRST logs:

 () C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe
 () C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe
 HKCU\...\Run: [Free Youtube Downloader] => C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe [156672 2016-01-20] ()
 C:\Users\{username}\Desktop\Free Youtube Downloader.lnk
 C:\Windows\Free Youtube Downloader

Free Youtube Downloader 4.1.1.1 (HKLM-x32\...\Free Youtube Downloader 4.1.1.1) (Version: 4.1.1.1 - Free Youtube Downloader)
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    In the existing folder C:\Users\{username}\Desktop
       Adds the file Free Youtube Downloader.lnk"="2/11/2016 12:16 PM, 2261 bytes, A
    Adds the folder C:\Windows\Free Youtube Downloader\Free Youtube Downloader
       Adds the file Box.exe"="1/20/2016 9:29 PM, 449024 bytes, A
       Adds the file Free YouTube Downloader.exe"="1/20/2016 11:47 PM, 156672 bytes, A
       Adds the file Uninstall.exe"="2/11/2016 12:16 PM, 112714 bytes, A
       Adds the file Uninstall.ini"="2/11/2016 12:16 PM, 3288 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Free Youtube Downloader 4.1.1.1]
       "DisplayIcon"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe"
       "DisplayName"="REG_SZ", "Free Youtube Downloader 4.1.1.1"
       "DisplayVersion"="REG_SZ", "4.1.1.1"
       "EstimatedSize"="REG_DWORD", 702
       "HelpLink"="REG_SZ", "[email protected]"
       "InstallDate"="REG_SZ", "20160211"
       "InstallLocation"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\"
       "InstallSource"="REG_SZ", "C:\Users\{username}\Desktop\"
       "Language"="REG_DWORD", 1033
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Free Youtube Downloader"
       "UninstallString"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe"
       "URLInfoAbout"="REG_SZ", "www.youtubedownloadernew.com"
       "VersionMajor"="REG_DWORD", 4
       "VersionMinor"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
       "Free Youtube Downloader"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2/11/2016
Scan Time: 12:20 PM
Logfile: mbamFYTD.txt
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2016.02.11.02
Rootkit Database: v2016.02.08.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 363810
Time Elapsed: 4 min, 17 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 5
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, 436, Delete-on-Reboot, [e18d4916316868ce837b15cae51c8f71]
Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 1684, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e]
Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 2536, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e]
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 1684, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7]
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 2536, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7]

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.BestYouTubeDownloader, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Free Youtube Downloader 4.1.1.1, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], 

Registry Values: 1
PUP.Optional.BestYouTubeDownloader, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Free Youtube Downloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, Quarantined, [e18d4916316868ce837b15cae51c8f71]

Registry Data: 0
(No malicious items detected)

Folders: 2
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], 
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], 

Files: 6
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, Delete-on-Reboot, [e18d4916316868ce837b15cae51c8f71], 
Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e], 
Rogue.TechSupportScam.Drop, C:\Users\{username}\Desktop\Setup (5).exe, Quarantined, [5a14ee7130691b1be1ebe300768b629e], 
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], 
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], 
PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.ini, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.