Jump to content

Removal instructions for Free Youtube Downloader


Recommended Posts

  • Staff

What is Free Youtube Downloader?

The Malwarebytes research team has determined that Free Youtube Downloader is a Tech Support Scam. These so-called "Tech Support Scammers" try to trick you into calling their phone number for various reasons, all of which turn out to be fraudulent in the end.

How do I know if my computer is affected by Free Youtube Downloader?

You may see these icons on your Desktop and in your Taskbar:

icons.png

and this entry in your list of installed programs:

warning4.png

How did Free Youtube Downloader get on my computer?

Tech Support Scammers use different methods for distributing themselves. This particular one was offered as a free Youtube downloader.

But it only downloads a file that will produce a fake Windows Activation screen with the Tech Support Scammers number.

warning1.png

How do I remove Free Youtube Downloader?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Free Youtube Downloader?
  • No, Malwarebytes' Anti-Malware removes Free Youtube Downloader completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Tech Supprt Scam.

protection1.png

Technical details for experts

You may see these entries in FRST logs:

 () C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe () C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe HKCU\...\Run: [Free Youtube Downloader] => C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe [156672 2016-01-20] () C:\Users\{username}\Desktop\Free Youtube Downloader.lnk C:\Windows\Free Youtube DownloaderFree Youtube Downloader 4.1.1.1 (HKLM-x32\...\Free Youtube Downloader 4.1.1.1) (Version: 4.1.1.1 - Free Youtube Downloader)
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    In the existing folder C:\Users\{username}\Desktop       Adds the file Free Youtube Downloader.lnk"="2/11/2016 12:16 PM, 2261 bytes, A    Adds the folder C:\Windows\Free Youtube Downloader\Free Youtube Downloader       Adds the file Box.exe"="1/20/2016 9:29 PM, 449024 bytes, A       Adds the file Free YouTube Downloader.exe"="1/20/2016 11:47 PM, 156672 bytes, A       Adds the file Uninstall.exe"="2/11/2016 12:16 PM, 112714 bytes, A       Adds the file Uninstall.ini"="2/11/2016 12:16 PM, 3288 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Free Youtube Downloader 4.1.1.1]       "DisplayIcon"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe"       "DisplayName"="REG_SZ", "Free Youtube Downloader 4.1.1.1"       "DisplayVersion"="REG_SZ", "4.1.1.1"       "EstimatedSize"="REG_DWORD", 702       "HelpLink"="REG_SZ", "support@youtubedownloadernew.com"       "InstallDate"="REG_SZ", "20160211"       "InstallLocation"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\"       "InstallSource"="REG_SZ", "C:\Users\{username}\Desktop\"       "Language"="REG_DWORD", 1033       "NoModify"="REG_DWORD", 1       "NoRepair"="REG_DWORD", 1       "Publisher"="REG_SZ", "Free Youtube Downloader"       "UninstallString"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe"       "URLInfoAbout"="REG_SZ", "www.youtubedownloadernew.com"       "VersionMajor"="REG_DWORD", 4       "VersionMinor"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]       "Free Youtube Downloader"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 2/11/2016Scan Time: 12:20 PMLogfile: mbamFYTD.txtAdministrator: YesVersion: 2.2.0.1024Malware Database: v2016.02.11.02Rootkit Database: v2016.02.08.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 363810Time Elapsed: 4 min, 17 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 5PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, 436, Delete-on-Reboot, [e18d4916316868ce837b15cae51c8f71]Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 1684, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e]Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 2536, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e]PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 1684, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7]PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 2536, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7]Modules: 0(No malicious items detected)Registry Keys: 1PUP.Optional.BestYouTubeDownloader, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Free Youtube Downloader 4.1.1.1, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], Registry Values: 1PUP.Optional.BestYouTubeDownloader, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Free Youtube Downloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, Quarantined, [e18d4916316868ce837b15cae51c8f71]Registry Data: 0(No malicious items detected)Folders: 2PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], Files: 6PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, Delete-on-Reboot, [e18d4916316868ce837b15cae51c8f71], Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e], Rogue.TechSupportScam.Drop, C:\Users\{username}\Desktop\Setup (5).exe, Quarantined, [5a14ee7130691b1be1ebe300768b629e], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.ini, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.