Home Malware Programs Adware Adware.DownloadnSave

Adware.DownloadnSave

Posted: February 6, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 3,375
First Seen: February 6, 2014
Last Seen: May 24, 2023
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\DownloadnSave\bhoclass.dll File name: bhoclass.dll
Size: 168.44 KB (168448 bytes)
MD5: 474a025909c75c607905b9e2cae8a56f
Detection count: 775
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\DownloadnSave
Group: Malware file
Last Updated: August 13, 2018
%ALLUSERSPROFILE%\DownloadnSave\bhoclass.dll File name: bhoclass.dll
Size: 321.02 KB (321024 bytes)
MD5: ea6ec328b84fafad0e072bd488ff8b49
Detection count: 70
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\DownloadnSave
Group: Malware file
Last Updated: February 6, 2014
%ALLUSERSPROFILE%\Application Data\DownloadnSave\bhoclass.dll File name: bhoclass.dll
Size: 266.12 KB (266121 bytes)
MD5: 5c9b3f5897c2e11e967b88d63a1600f2
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\DownloadnSave
Group: Malware file
Last Updated: February 6, 2014
%ALLUSERSPROFILE%\DownloadnSave\uninstall.exe File name: uninstall.exe
Size: 47.44 KB (47445 bytes)
MD5: b59c94c6169ac7e9a462680885155b28
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\DownloadnSave
Group: Malware file
Last Updated: February 6, 2014
%ALLUSERSPROFILE%\Application Data\DownloadnSave\bhoclass.dll File name: bhoclass.dll
Size: 252.26 KB (252268 bytes)
MD5: 249c7a3b82ec4d1688356343ad8fee95
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\DownloadnSave
Group: Malware file
Last Updated: February 6, 2014

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\bhoclass.bho.bhoclass.bhoSOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{F0526834-D6B2-BCFC-3F39-A2666E4B35AB}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{A8B0DBDE-8119-48B0-8088-D12DA01C36BA}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\DownloadnSave%ALLUSERSPROFILE%\DownloadnSave%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\DownloadnSave
Loading...