home

What is fst_us_87 and if its bad how do I uninstall it?

2

So I may not be the most tech savvy guy but I have simple understanding of all this. I'm not sure how this got onto my computer (probably when I let my roommate use my laptop) but whenever I try to uninstall it in Add/Remove programs it starts to install other programs which McAfee doesn't seem to realize. I quickly hit ctrl-alt-dlt and end the installer process which stops it. But the problem is that fst_us_87 doesn't seem to uninstall! I check a few websites to figure out what it was but all I could find that was similar to it was fst_us_2.

 

Please help this non-tech savvy guy whose about to go into college!

 

Thanks in advance!

Share
Asked Jun 2 '14 at 15:31
Add a comment

3 Answers

 
1
fst_us_87, which is an abbreviation for the software 'FreeSoftToday' is an adware program from Tuto4pc. The program is simply a software bundler/download manager that packages legitimate software such as open source and during install will recommend addition 'offers' for other software. These offers are generally for adware type toolbars and web browser extensions that are designed to deliver advertisements to your web browser. In addition to toolbars, it will also offer you a number of utility programs such as shady PC optimization programs and such.

The web site that hosts this is: http://us.freesofttoday.com (don't download anything from there :)

Here is an except from the site that you may or may not see during download but should explain what they are trying to do:

"During the install process, you will be given an option to allow the extension to become your default search engine and/or your default home page. If you consent to make it your home page, it will become your default home page that will appear each time you open your Internet browser. If you consent to make this your default search engine, your Internet browser default search engine will be set to SaveDaily Deals. You will be using the web search services when you enter queries in your browser search box, when you enter queries in your browser address bar, and when you enter misspelled, incorrectly formatted, or unresolved DNS submissions in your browser address bar."
Share
Answered Jun 3 '14 at 12:15
Add a comment
 
 
0
If You want to remove the program thoroughly, i would recommend using revo uninstaller which would list this program as an installed application and during uninstall just check the advanced button and that will remove all remnants.

Give it a try if You like 
Share
Answered Jun 8 '14 at 16:51
Add a comment
 
 
1
A rogue version of AdBlock Plus was recently found on the Google Chrome web store.  It was up for at least a month, based on the infection pattern.  A link on the Chrome store page redirected visitors to a bogus copy of the AdBlock Plus web site, where they were offered the "InstallPath" malware.  I believe this is where I got it as the system was working fine before then.  The InstallPath Install Manager automatically installed "FreeSoftToday" without any prompts on the affected system (and a bunch of other malware, including)

RegClean PRO, Wajam, Blitz Media Player, Windows Updater, WebSpeed, ConsumerInput, SW-Booster (and the BiFrost trojan).

It also appears the InstallPath malware installed a malicious proxy which routes traffic through the hackers web site.  These malware publishers dont even hide anymore: they have public web pages now.  They try to seem legal by claiming their junk can only be installed with your permission, and that is not true: some of this stuff has a valid code signing certificate and it can be installed in a scripted fashion on many Windows systems without any alerts.  They will also download worse malware during the installation so it is not detected by a hard drive scan before it gets installed unless you have some kind of real time protection.

There is probably an uninstaller for FreeSoftToday on your system called "unins000.exe" but I cant guarantee that it works completely, and if you have this malware you probably have others, and lots of modified registry keys, and modified system file permissions.  At the very least you should scan the drive with MalwareBytes in addition to HerdProtect.   But a better long-term solution is to just backup your personal files & install Ubuntu instead of Windows.  Then you can get your school work done instead of fixing the computer.  Who knows, you might even find a Linux users group on campus.  College is expensive; make it count!

McAfee is a pretty lame anti-virus, see here:
http://www.matousec.com/projects/proactive-security-challenge-64/results.php
_____________________

FreeSoft Today malware

Start Menu "fst"
C:\Program Files\fst_us_90\freeSoftToday_widget.exe

"FreeSoft Today" has a valid security certificate!
(issued to "TUTO4PC COM INTERNATIONAL SL" by "GlobalSign CodeSigning CA -G2")
contact@tutoriales100.com

silently communicates with:

prof10.eorezo.com
dl7.eorezo.com
ad35.cloud4ads.com
ad25.cloud4ads.com

Share
Answered Jun 22 '14 at 8:22
Add a comment

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

Not the answer you're looking for? Ask your own question.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.