Home Malware Programs Adware Adware.DownloadnSave

Adware.DownloadnSave

Posted: February 6, 2014

Threat Metric

Ranking: 16,382
Threat Level: 2/10
Infected PCs: 3,389
First Seen: February 6, 2014
Last Seen: March 5, 2025
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\DownloadnSave\bhoclass.dll File name: bhoclass.dll
Size: 321.02 KB (321024 bytes)
MD5: ea6ec328b84fafad0e072bd488ff8b49
Detection count: 70
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\DownloadnSave
Group: Malware file
Last Updated: February 6, 2014
%ALLUSERSPROFILE%\DownloadnSave\uninstall.exe File name: uninstall.exe
Size: 47.44 KB (47445 bytes)
MD5: b59c94c6169ac7e9a462680885155b28
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\DownloadnSave
Group: Malware file
Last Updated: February 6, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\bhoclass.bho.bhoclass.bhoSOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{F0526834-D6B2-BCFC-3F39-A2666E4B35AB}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{A8B0DBDE-8119-48B0-8088-D12DA01C36BA}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\DownloadnSave%ALLUSERSPROFILE%\DownloadnSave%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\DownloadnSave
Loading...