FTDownloader
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Ranking: | 5,803 |
| Threat Level: | 20 % (Normal) |
| Infected Computers: | 15,957 |
| First Seen: | July 16, 2013 |
| Last Seen: | September 19, 2023 |
| OS(es) Affected: | Windows |
FTDownloader is an adware infection that is used to generate profits from advertising while causing numerous problems on affected computers. FTDownloader is marketed as a download manager. FTDownloader is usually categorized as a Potentially Unwanted Program – many computer users go as far as to label FTDownloader mistakenly as a threat due to the many problems that have become associated with this PUP. If you are dealing with problems associated with FTDownloader, security researchers strongly advise the utilization of dedicated security tools for the immediate removal of this program from your computer.
Table of Contents
FTDownloader May Be Classified as a PUP Due to Its Threatening Actions
The main problem with FTDownloader is that FTDownloader generates revenue while causing numerous problems that may disrupt the computer users' activities. Security researchers have associated FTDownloader with the following symptoms:
- FTDownloader may cause poor system performance, especially affecting the computer user's Web browser. FTDownloader may cause the affected Web browser to freeze or crash at frequent intervals. It may also run slowly and take much longer than normal to load websites. FTDownloader may consume system resources and run in the background.
- FTDownloader may take over the victim's Web browser, directing it to websites associated with FTDownloader.
- FTDownloader is designed to deliver advertising content to affected Web browsers, often inserting advertisements into websites viewed on the affected Web browser and making the affected Web browser exhibit pop-up advertisements. FTDownloader advertisements may interrupt computer users' activities and disrupt computer users trying to browse the Web using the affected Web browser.
- FTDownloader may make changes to affected Web browsers' settings, usually changing the victim's homepage and search engine. FTDownloader may also interfere with the affected Web browser's security settings, making it more vulnerable to other PUPs or more serious threats.
SpyHunter Detects & Remove FTDownloader
File System Details
FTDownloader may create the following file(s):
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | FTdownloader V4.0-enabler.exe | 2493c58f7cf6ec51aa81e852868ad854 | 127 |
| 2. | FTdownloader V4.0-enabler.exe | 81d8f0448482191e16af0d7e3946a7bc | 113 |
| 3. | FTdownloader V6.0-bho64.dll | c426956d61f7f3197e032f45ea0a8cf6 | 95 |
| 4. | FTdownloader V6.0-bho64.dll | 081e8a11864a1080d466f1ba63c66e10 | 82 |
| 5. | FTdownloader V6.0-bho.dll | 5d0a90347f93c3413b4d673f6ec49671 | 42 |
| 6. | FTdownloader V6.0-bho64.dll | a6a633cfaa3e989bdfcec958c65d3700 | 7 |
| 7. | FTDownloader_setup.exe | c8b1cc64ce86c239a54adfe1a9c73ac8 | 6 |
| 8. | FTdownloader V7.0-buttonutil64.exe | cc24f062a46b35ec9d64a0097b2f7aa4 | 3 |
| 9. | uninst.exe | 9272f680aa1ab5148678440e0203d00f | 2 |
| 10. | FTdownloader V6.0-updater.exe | b04d6602a4c447023221ea097c3ecc81 | 2 |
| 11. | FTdownloader V6.0-firefoxinstaller.exe | 3c83b93cf0f11db9597a78fe079753e2 | 2 |
| 12. | uninst.exe | 2aa8c24b9491ded6f68455b6636804b7 | 1 |
| 13. | uninst.exe | f9c67fac449730342b11b0e8ba52e846 | 1 |
| 14. | uninst.exe | c03f20b6aba917d47175d2d69b86d85c | 1 |
| 15. | uninst.exe | 650f5f464c5d3057e9a6a894ef58dd33 | 1 |
| 16. | uninst.exe | 244f2731143543b9d3e7c91a0dd9de83 | 1 |
| 17. | uninst.exe | bd6eef7ad5ed2430553ee7c8376a66f9 | 1 |
| 18. | uninst.exe | c4d0697a4c7fbd0677059d5e96460071 | 1 |
| 19. | uninst.exe | 277a845202966b228853175d029ea268 | 1 |
| 20. | uninst.exe | c7815f2fc62c4a471a13849a2968ac44 | 1 |
| 21. | uninst.exe | c1aa38b79934c7621dc0eca70a0d43ff | 1 |
| 22. | uninst.exe | fd35fd31a181ccb271e775a21171c970 | 1 |
| 23. | uninst.exe | a449d3df185ad3d88e42d50b219b8e13 | 1 |
| 24. | uninst.exe | 7a8a56c380d58f24a62a48b2120b1477 | 1 |
| 25. | uninst.exe | 094e43b83103359d3eae2ed2323ccfc7 | 1 |
| 26. | uninst.exe | 10e00e9234e9ab44edd47f769a02016f | 1 |
| 27. | uninst.exe | acc98e2efe1e33a04bca09f339d50017 | 1 |
| 28. | ftdownloader v6.0-bg.exe | fdcb8df27f5816b687aaad28a77f3852 | 1 |
| 29. | FTdownloader V9.0-bho64.dll | 9cf9bfe85bfbc47d06730a4219f67f19 | 1 |
Registry Details
FTDownloader may create the following registry entry or registry entries:
CLSID
{11111111-1111-1111-1111-110311551174}
{11111111-1111-1111-1111-110411511167}
{11111111-1111-1111-1111-110511151181}
{22222222-2222-2222-2222-220322552274}
{22222222-2222-2222-2222-220422512267}
{44444444-4444-4444-4444-440344554474}
{44444444-4444-4444-4444-440444514467}
{44444444-4444-4444-4444-440544154481}
{55555555-5555-5555-5555-550355555574}
{55555555-5555-5555-5555-550455515567}
{55555555-5555-5555-5555-550555155581}
{66666666-6666-6666-6666-660366556674}
{66666666-6666-6666-6666-660466516667}
{66666666-6666-6666-6666-660566156681}
File name without path
FTDownloader.lnk
Software\AppDataLow\Software\FTdownloader V4.0
Software\AppDataLow\Software\FTdownloader V6.0
Software\AppDataLow\Software\FTdownloader V9.0
SOFTWARE\Classes\CrossriderApp0035574.BHO
SOFTWARE\Classes\CrossriderApp0035574.Sandbox
SOFTWARE\Classes\CrossriderApp0045167.BHO
SOFTWARE\Classes\CrossriderApp0045167.BHO.1
SOFTWARE\Classes\CrossriderApp0045167.Sandbox
SOFTWARE\Classes\CrossriderApp0045167.Sandbox.1
SOFTWARE\Classes\CrossriderApp0051581.BHO
SOFTWARE\Classes\CrossriderApp0051581.BHO.1
SOFTWARE\Classes\CrossriderApp0051581.Sandbox
SOFTWARE\Classes\CrossriderApp0051581.Sandbox.1
SOFTWARE\Classes\FTDownloader
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V6.0
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\FTdownloader V9.0
SOFTWARE\FTdownloader V4.0
SOFTWARE\FTdownloader V6.0
SOFTWARE\FTdownloader V9.0
Software\InstalledBrowserExtensions\installdaddy
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411511167}
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511151181}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{318da107-1f11-4428-b54d-9c3c1abb829a}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37230f23-eecb-450e-85ff-22da2a19152d}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38185b47-546c-4c7c-a69f-7a23e18a4a6e}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a386382e-0559-4a78-8fb3-e07303590ae0}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eb59b107-35ea-4e8e-bb7a-35c18644db46}
SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32
SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCS
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-codedownloader.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-enabler.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V4.0-updater.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-chromeinstaller.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-codedownloader.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-enabler.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-firefoxinstaller.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FTdownloader V6.0-updater.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-codedownloader
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-enabler
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FTdownloader V4.0-updater
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511151181}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511151181}
SOFTWARE\Wow6432Node\FTdownloader V4.0
SOFTWARE\Wow6432Node\FTdownloader V6.0
SOFTWARE\Wow6432Node\FTdownloader V9.0
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{105ce2f6-6c71-4553-95db-0521a2c0f060}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ac48e96-eb40-4792-9d9d-70d59d8754ba}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5935e203-f846-461d-89df-435059efcbb8}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6419a700-23b8-46ea-800b-c0ea78e133a2}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bc852d3-9d70-4611-9afc-016840417a4c}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\FTdownloader V4.0-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174}
FTdownloader V4.0
FTdownloader V6.0
FTdownloader V9.0
Directories
FTDownloader may create the following directory or directories:
| %APPDATA%\Microsoft\Windows\Start Menu\Programs\FTDownloader.com |
| %PROGRAMFILES%\FTdownloader V9.0 |
| %PROGRAMFILES(x86)%\FTdownloader V9.0 |
| %ProgramFiles%\FTDownloader.com |
| %ProgramFiles%\FTdownloader V4.0 |
| %ProgramFiles%\FTdownloader V6.0 |
| %ProgramFiles(x86)%\FTDownloader.com |
| %ProgramFiles(x86)%\FTdownloader V4.0 |
| %ProgramFiles(x86)%\FTdownloader V6.0 |
| %USERPROFILE%\AppData\LocalLow\FTdownloader V9.0 |
| %UserProfile%\Local Settings\Application Data\Cool_Mirage |
| %appdata%\FTdownloader V9.0 |
URLs
FTDownloader may call the following URLs:
| FT Downloader |
| ftd@ftd.com |
