Solved! Use FWTCHKSVC.EXE (Trojan SuspiciousFile) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

FWTCHKSVC.EXE – Trojan SuspiciousFile removal

FileMD5Virus Alias
FWTCHKSVC.EXE f80750d0d88cfca01b048cdd94db25ef Trojan SuspiciousFile

FWTCHKSVC.EXE size: 77264 bytes
FWTCHKSVC.EXE hash: F80750D0D88CFCA01B048CDD94DB25EF

Created files:

%Program Files%\FreeWebToon\FreeWebToonCtrl.dll
%Program Files%\FreeWebToon\FWTAlert.exe
%Program Files%\FreeWebToon\FWTChkSvc.exe
%Program Files%\FreeWebToon\fwthostsvc.exe
%Program Files%\FreeWebToon\FWTHostSvc.tlb
%Program Files%\FreeWebToon\FWTUninst.exe
%Program Files%\FreeWebToon\FWTUpdate.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\FreeWebToon: %Program Files%\FreeWebToon\FWTUpdate.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\fwtalert: %Program Files%\FreeWebToon\FWTAlert.exe
HKLM\System\CurrentControlSet\Services\FreeWebToon\Type: 10010000
HKLM\System\CurrentControlSet\Services\FreeWebToon\Start: 02000000
HKLM\System\CurrentControlSet\Services\FreeWebToon\DisplayName: 4???T?(FreeWebToon)
HKLM\System\CurrentControlSet\Services\FreeWebToon\ImagePath: %Program Files%\FreeWebToon\FWTChkSvc.exe

Detected by UnHackMe:

FWTCHKSVC.EXE
Default location: %PROGRAM FILES%\FREEWEBTOON\FWTCHKSVC.EXE

Dropper information:
MD5: 17d4c8db82cd028234ebb96b0de29ce3
File size: 868304 bytes

Leave a Reply