Jump to content
Sign in to follow this  
Metallica

Removal instructions for Free Youtube Downloader

Recommended Posts

What is Free Youtube Downloader?

The Malwarebytes research team has determined that Free Youtube Downloader is a Tech Support Scam. These so-called "Tech Support Scammers" try to trick you into calling their phone number for various reasons, all of which turn out to be fraudulent in the end.

How do I know if my computer is affected by Free Youtube Downloader?

You may see these icons on your Desktop and in your Taskbar:

icons.png

and this entry in your list of installed programs:

warning4.png

How did Free Youtube Downloader get on my computer?

Tech Support Scammers use different methods for distributing themselves. This particular one was offered as a free Youtube downloader.

But it only downloads a file that will produce a fake Windows Activation screen with the Tech Support Scammers number.

warning1.png

How do I remove Free Youtube Downloader?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Free Youtube Downloader?
  • No, Malwarebytes' Anti-Malware removes Free Youtube Downloader completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Tech Supprt Scam.

protection1.png

Technical details for experts

You may see these entries in FRST logs:

 () C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe () C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe HKCU\...\Run: [Free Youtube Downloader] => C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe [156672 2016-01-20] () C:\Users\{username}\Desktop\Free Youtube Downloader.lnk C:\Windows\Free Youtube DownloaderFree Youtube Downloader 4.1.1.1 (HKLM-x32\...\Free Youtube Downloader 4.1.1.1) (Version: 4.1.1.1 - Free Youtube Downloader)
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    In the existing folder C:\Users\{username}\Desktop       Adds the file Free Youtube Downloader.lnk"="2/11/2016 12:16 PM, 2261 bytes, A    Adds the folder C:\Windows\Free Youtube Downloader\Free Youtube Downloader       Adds the file Box.exe"="1/20/2016 9:29 PM, 449024 bytes, A       Adds the file Free YouTube Downloader.exe"="1/20/2016 11:47 PM, 156672 bytes, A       Adds the file Uninstall.exe"="2/11/2016 12:16 PM, 112714 bytes, A       Adds the file Uninstall.ini"="2/11/2016 12:16 PM, 3288 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Free Youtube Downloader 4.1.1.1]       "DisplayIcon"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe"       "DisplayName"="REG_SZ", "Free Youtube Downloader 4.1.1.1"       "DisplayVersion"="REG_SZ", "4.1.1.1"       "EstimatedSize"="REG_DWORD", 702       "HelpLink"="REG_SZ", "support@youtubedownloadernew.com"       "InstallDate"="REG_SZ", "20160211"       "InstallLocation"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\"       "InstallSource"="REG_SZ", "C:\Users\{username}\Desktop\"       "Language"="REG_DWORD", 1033       "NoModify"="REG_DWORD", 1       "NoRepair"="REG_DWORD", 1       "Publisher"="REG_SZ", "Free Youtube Downloader"       "UninstallString"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe"       "URLInfoAbout"="REG_SZ", "www.youtubedownloadernew.com"       "VersionMajor"="REG_DWORD", 4       "VersionMinor"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]       "Free Youtube Downloader"="REG_SZ", "C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 2/11/2016Scan Time: 12:20 PMLogfile: mbamFYTD.txtAdministrator: YesVersion: 2.2.0.1024Malware Database: v2016.02.11.02Rootkit Database: v2016.02.08.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 363810Time Elapsed: 4 min, 17 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 5PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, 436, Delete-on-Reboot, [e18d4916316868ce837b15cae51c8f71]Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 1684, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e]Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 2536, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e]PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 1684, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7]PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, 2536, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7]Modules: 0(No malicious items detected)Registry Keys: 1PUP.Optional.BestYouTubeDownloader, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Free Youtube Downloader 4.1.1.1, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], Registry Values: 1PUP.Optional.BestYouTubeDownloader, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Free Youtube Downloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, Quarantined, [e18d4916316868ce837b15cae51c8f71]Registry Data: 0(No malicious items detected)Folders: 2PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], Files: 6PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Free YouTube Downloader.exe, Delete-on-Reboot, [e18d4916316868ce837b15cae51c8f71], Rogue.TechSupportScam, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, Delete-on-Reboot, [294585da8e0bf54181bdbc26aa57d22e], Rogue.TechSupportScam.Drop, C:\Users\{username}\Desktop\Setup (5).exe, Quarantined, [5a14ee7130691b1be1ebe300768b629e], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Box.exe, Delete-on-Reboot, [d49a2c333a5f8fa7314a4b9ff60c29d7], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.exe, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], PUP.Optional.BestYouTubeDownloader, C:\Windows\Free Youtube Downloader\Free Youtube Downloader\Uninstall.ini, Quarantined, [d49a2c333a5f8fa7314a4b9ff60c29d7], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.