Categories: PUA

PUA:Win32/YTDVideoDownload (file analysis)

The PUA:Win32/YTDVideoDownload is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA:Win32/YTDVideoDownload virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine PUA:Win32/YTDVideoDownload?


File Info:

crc32: 939F230Fmd5: e939dec284b2259c5437aa9db176eaecname: YTDSetup.exesha1: f141a72b17bc16a355d699a0c21e734f9bc6cf22sha256: f9146d1824e9faa5d51a031e70a9a9eabf27649e43f0573cd015a40322069e24sha512: fd3c565f19560d4f8b0cf561e8fa86b8399d20339bc24d1d481121e28a0c6c115bf6d5ad66c52fe901dbb1a7d0ebc54b52b0e89cf67d19891555ba3826e11d29ssdeep: 196608:HDm9eIuCvGHhmlj7j87I0uclQUChw6QzB8tAGr9rEkyuL9eMzxTG5P9vWCkRZ:HDFCvsoxU7IHCDChwTzWdREkXLLuP9O7type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: Copyright xa9 2007-2019 GreenTree Applications SRLFileVersion: 5.9.15.5ProductName: YTD Video Downloader ApplicationProductVersion: 5.9.15.5FileDescription: YTD Video Downloader ApplicationOriginalFilename: Setup.exeTranslation: 0x0409 0x04e4

PUA:Win32/YTDVideoDownload also known as:

DrWeb Adware.Downware.19586
Qihoo-360 Generic/Trojan.ebb
McAfee Artemis!E939DEC284B2
K7AntiVirus Adware ( 0055350e1 )
K7GW Adware ( 0055350e1 )
Invincea heuristic
BitDefenderTheta Gen:NN.ZedlaF.34090.vu4@aetb7pmi
GData Win32.Adware.YTDownloader.B
ViRobot Adware.Ursu.10291792
Sophos Generic PUA ID (PUA)
Comodo ApplicUnwnt@#2gixqrg9dkbkw
McAfee-GW-Edition Artemis
Cyren W32/Trojan.XDTC-4378
Microsoft PUA:Win32/YTDVideoDownload
VBA32 BScope.Adware.Downware
MAX malware (ai score=82)
ESET-NOD32 a variant of Win32/YTDDownloader.F potentially unwanted
TrendMicro-HouseCall TROJ_GEN.R002H09BJ20
Rising Trojan.Generic@ML.89 (RDMK:OVnZlXl/dcvGWiCX1EdAAQ)
Yandex Riskware.Agent!

How to remove PUA:Win32/YTDVideoDownload?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Malware.AI.2972915474 malicious file

The Malware.AI.2972915474 is considered dangerous by lots of security experts. When this infection is active,…

37 mins ago

Win32/Autoit.OPN information

The Win32/Autoit.OPN is considered dangerous by lots of security experts. When this infection is active,…

42 mins ago

Malware.AI.3788326785 removal

The Malware.AI.3788326785 is considered dangerous by lots of security experts. When this infection is active,…

58 mins ago

What is “Trojan.Generic.35619263”?

The Trojan.Generic.35619263 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Generic.Dacic.1A7FA519.A.F34D6DE8 removal instruction

The Generic.Dacic.1A7FA519.A.F34D6DE8 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Should I remove “Babar.143901”?

The Babar.143901 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago