SPEEDGET.EXE – Adware KorAd

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SPEEDGET.EXE – Adware KorAd removal

FileMD5Virus Alias
SPEEDGET.EXE 99899b58a0da73a9dfa21d2dbf3a7d81 Adware KorAd

SPEEDGET.EXE size: 785512 bytes
SPEEDGET.EXE hash: 99899B58A0DA73A9DFA21D2DBF3A7D81

Created files:

%AppData%\SpeedDownload\fbdchk.exe
%AppData%\SpeedDownload\FBDManager.exe
%AppData%\SpeedDownload\FBDMgr.dll
%AppData%\SpeedDownload\FBDSvcMan.exe
%AppData%\SpeedDownload\FBDUnist.exe
%AppData%\SpeedDownload\SpeedGet.exe
%AppData%\SpeedDownload\SpeedGet.tlb

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SpeedDownload: %WinDir%\System32\config\Systemprofile\Application Data\SpeedDownload\FBDManager.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\rpga: %WinDir%\System32\config\Systemprofile\Application Data\SpeedDownload\rpgchk.exe
HKLM\System\CurrentControlSet\Services\FBDSvcman\Type: 10010000
HKLM\System\CurrentControlSet\Services\FBDSvcman\Start: 02000000
HKLM\System\CurrentControlSet\Services\FBDSvcman\DisplayName: FBDSvcman
HKLM\System\CurrentControlSet\Services\FBDSvcman\ImagePath: %WinDir%\System32\config\Systemprofile\Application Data\SpeedDownload\FBDSvcMan.exe

Detected by UnHackMe:

SPEEDGET.EXE
Default location: %APPDATA%\SPEEDDOWNLOAD\SPEEDGET.EXE

Dropper information:
MD5: 7b3e7271ff4a251eded24b9291b3f999
File size: 921848 bytes

Leave a Reply