Home Malware Programs Adware DownTango

DownTango

Posted: January 9, 2013

Threat Metric

Ranking: 19,342
Threat Level: 1/10
Infected PCs: 37,666
First Seen: January 9, 2013
Last Seen: December 26, 2024
OS(es) Affected: Windows

DownTango is a download manager that claims to be able to 'accelerate' your download speeds. Unfortunately, DownTango also shows some traits that are typical of PUPs (Potentially Unwanted Programs), such as resisting being uninstalled, installing itself without your consent and making needless changes to your browser. Changes to your browser will not remove DownTango, which should be deleted by suitable anti-malware software whenever you decide that you're uninterested in its downloading services.

DownTango: a Virtual Waiter that Serves Your Downloads with an Excess of Bad Service

While its brand name is reminiscent of military codes and corresponding military reputations for efficiency, DownTango makes claims that no download management program could back up – such as claiming to speed up your downloads and allocate resources in ways that prevent your PC from being slowed down. Other than this unusual and impossible claims, DownTango does perform its basic functions, including downloading and managing files, but SpywareRemove.com malware researchers also have seen negative characteristics associated with DownTango. These traits include:

  • Browser hijacks that modify your search results, your homepage and your 404 error pages – all to display sites that are profitable to DownTango's company.
  • Resisting removal by normal methods, such as the Control Panel or appropriate plugin management features.
  • Having an unresponsive support team.
  • Lastly, DownTango will monitor your basic web-browsing habits with respect to which sites are visited, how long visits last and similar statistics. Although no extremely confidential information (such as passwords) is stolen, this function may use up system resources and may have an adverse aftermath on your PC's performance.

These attributes are common symptoms of PUPs and browser hijackers, and for these reasons, SpywareRemove.com malware researchers recommend that you delete DownTango under all normal circumstances.

Giving DownTango a Thumbs Down – and Corresponding Exit

Presumably to keep its unsavory means of profit-mongering alive as long as possible, DownTango will resist being deleted by typical methods that would apply to any reputable program or browser add-on. However, malware experts haven't seen any signs of DownTango being able to resist suitable anti-malware programs, which can delete DownTango and related PC threats during a system scan.

SpywareRemove.com malware research team also stresses that you should be careful to avoid freeware programs with unusual claims – such as claiming to be able to speed up downloads – since such fraudulent features often are used as a cover for distributing PUPs. DownTango, like many low-level threats, appears to handle its distribution mainly through bundles with unrelated freeware programs, especially games from disreputable sites.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\AdwCleaner\FileQuarantine\C\Users\<username>\AppData\Roaming\DownTangoLauncherToolbar\DownTangoLauncherToolbar.dll.vir File name: DownTangoLauncherToolbar.dll.vir
Size: 1.03 MB (1031240 bytes)
MD5: b4b2b2f42fed27bcc81cad545b223f56
Detection count: 4,455
Mime Type: unknown/vir
Path: %SYSTEMDRIVE%\AdwCleaner\FileQuarantine\C\Users\<username>\AppData\Roaming\DownTangoLauncherToolbar\DownTangoLauncherToolbar.dll.vir
Group: Malware file
Last Updated: February 11, 2024
%SYSTEMDRIVE%\AdwCleaner\Quarantine\v1\20190927.112145\231\DownTangoFTToolbar\DownTangoFTToolbar.dll#FFC5706D4E4220E7 File name: DownTangoFTToolbar.dll#FFC5706D4E4220E7
Size: 1.03 MB (1030728 bytes)
MD5: 82ecf7afc59afe3782e654879ef7efe5
Detection count: 3,597
Mime Type: unknown/dll#FFC5706D4E4220E7
Path: %SYSTEMDRIVE%\AdwCleaner\Quarantine\v1\20190927.112145\231\DownTangoFTToolbar\DownTangoFTToolbar.dll#FFC5706D4E4220E7
Group: Malware file
Last Updated: October 8, 2023
%APPDATA%\FTDownTango3aToolbar\FTDownTango3aToolbar.dll File name: FTDownTango3aToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 82254f73b8eeac15c76f6591a17b94a8
Detection count: 1,283
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\FTDownTango3aToolbar
Group: Malware file
Last Updated: August 17, 2020
%APPDATA%\FTDownTango1aToolbar\FTDownTango1aToolbar.dll File name: FTDownTango1aToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 164d9f20d08529865ee1a2c50ea36fdc
Detection count: 363
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\FTDownTango1aToolbar
Group: Malware file
Last Updated: January 2, 2020
C:\Program Files (x86)\Trend Micro\HiJackThis\backups\backup-20131224-010308-326.dll File name: backup-20131224-010308-326.dll
Size: 1.03 MB (1031240 bytes)
MD5: f79a7b092e534654b66155c6fd1b9b0f
Detection count: 358
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\Trend Micro\HiJackThis\backups\backup-20131224-010308-326.dll
Group: Malware file
Last Updated: June 1, 2022
%APPDATA%\DownTangoFTbToolbar\DownTangoFTbToolbar.dll File name: DownTangoFTbToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 3250088608ee00e91550bfd6c82d8300
Detection count: 201
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DownTangoFTbToolbar
Group: Malware file
Last Updated: October 23, 2018
%APPDATA%\FTDownTango1bToolbar\FTDownTango1bToolbar.dll File name: FTDownTango1bToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: b2f1a6a921487e12ff93bcf8cb0f7e4a
Detection count: 187
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\FTDownTango1bToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DownTangoDbToolbar\DownTangoDbToolbar.dll File name: DownTangoDbToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 0c36271f29f041b19a01ae1057613d85
Detection count: 162
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DownTangoDbToolbar
Group: Malware file
Last Updated: July 2, 2018
C:\Users\<username>\Documents\R-TT\RECOVERY\$$$Pasta12733972489\DownTango4SToolbar.dll.q_Quarantine_30ADBE57_q File name: DownTango4SToolbar.dll.q_Quarantine_30ADBE57_q
Size: 1.03 MB (1031752 bytes)
MD5: b769ff556720664be836b0f05c5f97e1
Detection count: 117
Mime Type: unknown/q_Quarantine_30ADBE57_q
Path: C:\Users\<username>\Documents\R-TT\RECOVERY\$$$Pasta12733972489\DownTango4SToolbar.dll.q_Quarantine_30ADBE57_q
Group: Malware file
Last Updated: May 11, 2021
%APPDATA%\DDownTango4bToolbar\DDownTango4bToolbar.dll File name: DDownTango4bToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 8a42c8a124efdc353c9dad596c67f5e0
Detection count: 91
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango4bToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DDownTango5aToolbar\DDownTango5aToolbar.dll File name: DDownTango5aToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 4917f12ce80a49759821f85b565ed4f6
Detection count: 59
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango5aToolbar
Group: Malware file
Last Updated: December 21, 2019
%APPDATA%\DownTangoToolbar1Toolbar\DownTangoToolbar1Toolbar.dll File name: DownTangoToolbar1Toolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: c842bcf1c4e002b36aa20fc862c03fd5
Detection count: 52
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DownTangoToolbar1Toolbar
Group: Malware file
Last Updated: November 7, 2020
%APPDATA%\DownTango4SToolbar\DownTango4SToolbar.dll File name: DownTango4SToolbar.dll
Size: 1.03 MB (1030728 bytes)
MD5: 626def51f4738b142f6645a22a947dc0
Detection count: 35
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DownTango4SToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DDownTango5bToolbar\DDownTango5bToolbar.dll File name: DDownTango5bToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: ab17d10da8eb594856208b94149684fc
Detection count: 33
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango5bToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DDownTango6bToolbar\DDownTango6bToolbar.dll File name: DDownTango6bToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: f45e91a9355283e48c97615718aedae1
Detection count: 32
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango6bToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DownTango1874Toolbar\DownTango1874Toolbar.dll File name: DownTango1874Toolbar.dll
Size: 1.03 MB (1030728 bytes)
MD5: a67152e7477686c1b98f635e0e870243
Detection count: 25
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DownTango1874Toolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DownTangoLauncherToolbar\DownTangoLauncherToolbar.dll File name: DownTangoLauncherToolbar.dll
Size: 1.02 MB (1024360 bytes)
MD5: a6ccb93e7112e96ba894b794fff9c278
Detection count: 25
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DownTangoLauncherToolbar
Group: Malware file
Last Updated: March 25, 2016
%APPDATA%\DDownTango2bToolbar\DDownTango2bToolbar.dll File name: DDownTango2bToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 3485a55c65b445615bef359b08db5880
Detection count: 24
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango2bToolbar
Group: Malware file
Last Updated: August 27, 2016
C:\Users\<username>\Documents\Application Data\DDownTango1aToolbar\DDownTango1aToolbar.dll File name: DDownTango1aToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 8e80a76846fea5e005eba4cffe1a3363
Detection count: 19
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Users\<username>\Documents\Application Data\DDownTango1aToolbar\DDownTango1aToolbar.dll
Group: Malware file
Last Updated: June 15, 2022
%APPDATA%\DDownTango1bToolbar\DDownTango1bToolbar.dll File name: DDownTango1bToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 136f1bf7574cba235b89c968cb24a017
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango1bToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DownTangoToolbar\DownTangoToolbar.dll File name: DownTangoToolbar.dll
Size: 1.03 MB (1030728 bytes)
MD5: 55b9325e08cd5dadf71b439cf311e556
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DownTangoToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DDownTango4aToolbar\DDownTango4aToolbar.dll File name: DDownTango4aToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 887613673b4af70127da69d5da528bbf
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango4aToolbar
Group: Malware file
Last Updated: August 27, 2016
%APPDATA%\DDownTango3aToolbar\DDownTango3aToolbar.dll File name: DDownTango3aToolbar.dll
Size: 1.03 MB (1031752 bytes)
MD5: 37fb06500ef5f1248ad615cc073eea29
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\DDownTango3aToolbar
Group: Malware file
Last Updated: August 27, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{036EC50E-B1E7-481C-8E5A-24E42150F9E3}{07766d44-2402-40b4-978d-0cbdaca7e945}{378626c2-fe28-436e-be0d-88c8bf7fc855}{5C0647DE-0EEE-4822-B211-A05A5BF316AB}{8698070c-fe56-4e93-a663-1f9a5323c812}{8d3ec233-b92d-4187-a506-284127cfba2d}{A85E31F1-A6CE-4ACE-A560-EC01271B7F55}{b52d0735-ec19-448a-abde-e01b5bd275d2}{b9e6846b-455a-4c67-ac17-cf23a997c6c5}{f4096b86-cd4b-4097-bdd5-8b4eb7ef06d0}File name without pathDownTango.lnkHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\AppID\DownTango4SToolbar.DLLSOFTWARE\Classes\AppID\DownTangoFTToolbar.DLLSOFTWARE\Classes\AppID\DownTangoLauncherToolbar.DLLSOFTWARE\Classes\Wow6432Node\AppID\DownTango4SToolbar.DLLSOFTWARE\Classes\Wow6432Node\AppID\DownTangoFTToolbar.DLLSOFTWARE\Classes\Wow6432Node\AppID\DownTangoLauncherToolbar.DLLSOFTWARE\DownTangoSOFTWARE\DownTango4SToolbarSOFTWARE\DownTangoFTToolbarSOFTWARE\DowntangolaunchertoolbarSOFTWARE\Microsoft\Windo ws\CurrentVersion\Uninstall\DownTangoSOFTWARE\Wow6432Node\DownTangoSOFTWARE\Wow6432Node\Microsoft\Windo ws\CurrentVersion\Uninstall\DownTangoHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}DownTango{107c7af4-bcdb-4ba2-87d1-3cb1f7190dba}_is1{cb6d194b-149b-4e28-9b6b-fd0bdaa2aa7c}_is1

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\DownTango%ALLUSERSPROFILE%\Start Menu\Programs\DownTango%APPDATA%\DownTango4SToolbar%APPDATA%\DownTangoLauncherToolbar%APPDATA%\Microsoft\Windows\Start Menu\Programs\DownTango%LOCALAPPDATA%\DownTango%PROGRAMFILES%\DownTango4SToolbar%PROGRAMFILES%\DownTangoFTToolbar%PROGRAMFILES%\Red Sky\DownTango%PROGRAMFILES(x86)%\DownTango4SToolbar%PROGRAMFILES(x86)%\DownTangoFTToolbar%PROGRAMFILES(x86)%\DownTangoLauncherToolbar%PROGRAMFILES(x86)%\Red Sky\DownTango%USERPROFILE%\AppData\LocalLow\DownTango4SToolbar%UserProfile%\Local Settings\Application Data\DownTango
Loading...