FBDSVCMAN.EXE – Unclassified Malware removal

FBDSVCMAN.EXE size: 79464 bytes
FBDSVCMAN.EXE hash: EA650435120595CBC6029C437CCFE582

Created files:

%AppData%\SpeedDownload\fbdchk.exe
%AppData%\SpeedDownload\FBDManager.exe
%AppData%\SpeedDownload\FBDMgr.dll
%AppData%\SpeedDownload\FBDSvcMan.exe
%AppData%\SpeedDownload\FBDUnist.exe
%AppData%\SpeedDownload\SpeedGet.exe
%AppData%\SpeedDownload\SpeedGet.tlb

Autostart registry keys:

HKLM\Software\Classes\CLSID\{5121BCAB-14D5-40AD-A469-4437CC51F7AA}\InprocServer32 : %WinDir%\System32\config\Systemprofile\Application Data\SpeedDownload\FBDMgr.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SpeedDownload: %WinDir%\System32\config\Systemprofile\Application Data\SpeedDownload\FBDManager.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\rpga: %WinDir%\System32\config\Systemprofile\Application Data\SpeedDownload\rpgchk.exe
HKLM\System\CurrentControlSet\Services\FBDSvcman\Type: 10010000
HKLM\System\CurrentControlSet\Services\FBDSvcman\Start: 02000000
HKLM\System\CurrentControlSet\Services\FBDSvcman\DisplayName: FBDSvcman
HKLM\System\CurrentControlSet\Services\FBDSvcman\ImagePath: %WinDir%\System32\config\Systemprofile\Application Data\SpeedDownload\FBDSvcMan.exe

Detected by UnHackMe:

FBDSVCMAN.EXE
Default location: %APPDATA%\SPEEDDOWNLOAD\FBDSVCMAN.EXE

Dropper information:
MD5: 316949e1a49a9555d1abef02dbb74bcb
File size: 921848 bytes