Solved! Use FWTALERT.EXE (Adware Kraddare) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

FWTALERT.EXE – Adware Kraddare removal

File MD5 Virus Alias
FWTALERT.EXE e433b0646756db3ae4078000021bb3c9 Adware Kraddare
FWTALERT.EXE e433b0646756db3ae4078000021bb3c9 Trojan SuspiciousFile
FWTALERT.EXE e433b0646756db3ae4078000021bb3c9 Trojan Generic
FWTALERT.EXE e433b0646756db3ae4078000021bb3c9 Trojan Downloader

FWTALERT.EXE size: 331728 bytes
FWTALERT.EXE hash: E433B0646756DB3AE4078000021BB3C9

Created files:

%Program Files%\FreeWebToon\FreeWebToonCtrl.dll
%Program Files%\FreeWebToon\FWTAlert.exe
%Program Files%\FreeWebToon\FWTChkSvc.exe
%Program Files%\FreeWebToon\fwthostsvc.exe
%Program Files%\FreeWebToon\FWTHostSvc.tlb
%Program Files%\FreeWebToon\FWTUninst.exe
%Program Files%\FreeWebToon\FWTUpdate.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\FreeWebToon: %Program Files%\FreeWebToon\FWTUpdate.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\fwtalert: %Program Files%\FreeWebToon\FWTAlert.exe
HKLM\System\CurrentControlSet\Services\FreeWebToon\Type: 10010000
HKLM\System\CurrentControlSet\Services\FreeWebToon\Start: 02000000
HKLM\System\CurrentControlSet\Services\FreeWebToon\DisplayName: 4???T?(FreeWebToon)
HKLM\System\CurrentControlSet\Services\FreeWebToon\ImagePath: %Program Files%\FreeWebToon\FWTChkSvc.exe

Detected by UnHackMe:

FWTALERT.EXE
Default location: %PROGRAM FILES%\FREEWEBTOON\FWTALERT.EXE

Dropper information:
MD5: 17d4c8db82cd028234ebb96b0de29ce3
File size: 868304 bytes

Leave a Reply