Fearless Web Downloader


· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Detection and Removal ·
· Research ·



Overview

Vendor Notes:

1.0: From the doc:
===================================
Fearless Web Downloader Version 1.0
=================================== Just a simple downloader, that comes with an easy to use editor. Downloader is written in ASM, and the editor in Delphi. The downloader is very small, 4.0KB unpacked and 3.0KB packed under UPX.
How to use:-
===========
* Open the Editor.exe
* Select your webdownloader file, webdl.exe
* Click 'Read settings'
* Set your download path and startup names
* Click 'Write settings'
* Now send the webdl.exe to your victim and upon execution your file should be downloaded and then run. - Usually a trojan server
thanks
Programming Team for Web/dl:
===========================
triforce - Main coder
mf4 - testing

2.0: From the doc: 'Open Generator.exe, fill in the 2 settings with your own and hit [Make Server] A few seconds later and your newly assembled server will be created in the same directory called server.exe You can then pack this with the packer.exe, to decrease the file size down to about 1.3k or less. In this version you may use an icon. I have supplied a small built in library for your use. Remeber that using an icon will increase the file size ... so you will not get it below under 1.3k. But it should still pack down to 2k. Icons are optional !!'

Alias:

TrojanDownloader.WebDown.10, TrojanDownloader.WebDown.20, TrojanDownloader.Win32.Fearless.12, TrojanDownloader.Win32.Small.e, TrojanDownloader.Win32.Webdl.f, TrojanDropper.Win32.Fearless.11

Category:

Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.

Variants:

  • Fearless Web Downloader 1.0
  • Fearless Web Downloader 1.1
  • Fearless Web Downloader 1.2
  • Fearless Web Downloader 2.0
  • Similar Pests:

    Downloader

    Origins

    Author:

    triforce

    EMail:

    rootbreaker@linuxmail.org

    URL:

    http://areyoufearless.com

    Programming Language:

    1.1: Server written in Assembly. Editor written in Delphi. 2.0: Server written in Assembly. Editor written in Visual Basic.

    Date of Origin:

    Variants from April, 2002 to July, 2003

    Distribution

    Prevalence:

  • Fearless Web Downloader 1.2: 0.1%
  • More Info

    Clot Factor:

  • Fearless Web Downloader 1.2: < 1
  • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Countries Affected:

    In the past three months, we have received reports of Fearless Web Downloader in United States.

    Operation

    Storage Required:

  • Fearless Web Downloader 1.0: at least 421 KB
  • Fearless Web Downloader 1.1: at least 405 KB
  • Fearless Web Downloader 1.2: at least 29 KB
  • Fearless Web Downloader 2.0: at least 2021 KB
  • Restart:

    1.1 and prior: HKLM\Software\Microsoft\Windows\CurrentVersion\Run 1.2+: none.
    Autostarting Pests

    ScreenShot:


    Fearless Webdownloader 1.0



    Fearless Webdownloader 1.1



    Fearless Webdownloader 1.2



    Fearless Webdownloader 2.0


    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    Follow these steps to remove Fearless Web Downloader from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    April 03, 2005