Adware.KeyDownload

By CagedTech in Adware

Threat Scorecard

Ranking:	11,601
Threat Level:	20 % (Normal)
Infected Computers:	21,785

First Seen:	February 14, 2014
Last Seen:	October 18, 2023
OS(es) Affected:	Windows

Adware.KeyDownload is adware that may display random pop-up ads carrying discount coupons, offers, sales and deals in well-known online shopping websites and social networking websites. Adware.KeyDownload may add an adware supported add-on, plug-in or browser extension for Mozilla Firefox, Internet Explorer and Google Chrome Web browsers that may show pop-up, pop-under, banner, search, and in-text link interstitial ads. Adware.KeyDownload may propagate and install itself onto the PC as an additional application throughout the installation of possibly unprotected free program downloads. Adware.KeyDownload may be embedded in the Web browser when the computer user installs free software that may have added into their installation Adware.KeyDownload. When the PC user installs free programs on the computer system, he may also install Adware.KeyDownload. Adware.KeyDownload may unwillingly redirect PC users to questionable websites that may be created for commercial intentions. Adware.KeyDownload may be designed with the aim to generate advertising income from ad clicks and inreased web traffic.

Table of Contents

SpyHunter Detects & Remove Adware.KeyDownload

File System Details

Adware.KeyDownload may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	ExtensionUpdaterService.exe	8942e2b842395f06caf06ce88caa1b0b	3,987
Name: ExtensionUpdaterService.exe MD5: 8942e2b842395f06caf06ce88caa1b0b Size: 209.4 KB (209408 bytes) Detections: 3,987 Type: Executable File Path: C:\Program Files\Keyplayer Classic\ExtensionUpdaterService.exe Group: Malware file Last Updated: October 17, 2022
2.	Extension64.dll	7444e2be53d2fcba4f87bd8eda72625f	2,229
Name: Extension64.dll MD5: 7444e2be53d2fcba4f87bd8eda72625f Size: 204.28 KB (204288 bytes) Detections: 2,229 Type: Dynamic link library Path: %PROGRAMFILES%\Keyplayer Classic Group: Malware file Last Updated: July 3, 2014
3.	KDUpdSrv.exe	28464ed23eca4fedb103778f5b9d1e0d	1,924
Name: KDUpdSrv.exe MD5: 28464ed23eca4fedb103778f5b9d1e0d Size: 229.69 KB (229696 bytes) Detections: 1,924 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\KDUpdSrv.exe Group: Malware file Last Updated: October 18, 2023
4.	kdupdsrv.exe	62afab4f927ff7826fd27d843b958401	1,631
Name: kdupdsrv.exe MD5: 62afab4f927ff7826fd27d843b958401 Size: 213.82 KB (213824 bytes) Detections: 1,631 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: May 21, 2016
5.	keyplayer.exe	7db05775b4b689d05a132eb7c5f96e44	707
Name: keyplayer.exe MD5: 7db05775b4b689d05a132eb7c5f96e44 Size: 62.46 KB (62464 bytes) Detections: 707 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload\KEYPLAYER Group: Malware file Last Updated: November 16, 2019
6.	Extension32.dll	45a3b5bbd4c35d7e36cfc795e8054395	668
Name: Extension32.dll MD5: 45a3b5bbd4c35d7e36cfc795e8054395 Size: 168.44 KB (168448 bytes) Detections: 668 Type: Dynamic link library Path: %PROGRAMFILES%\Keyplayer Classic Group: Malware file Last Updated: July 3, 2014
7.	guardnot.exe	f884b152552d3a62fed5e878aa9925ef	363
Name: guardnot.exe MD5: f884b152552d3a62fed5e878aa9925ef Size: 122.57 KB (122576 bytes) Detections: 363 Type: Executable File Path: C:\Program Files (x86)\KeyDownload\KeyPlayr\guardnot.exe Group: Malware file Last Updated: December 12, 2021
8.	kdupdsrv.exe	b5cf24fd6db378d9d922025b9f3cd246	327
Name: kdupdsrv.exe MD5: b5cf24fd6db378d9d922025b9f3cd246 Size: 217.92 KB (217920 bytes) Detections: 327 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: January 8, 2019
9.	syscheck.exe	d5316f64948b0a12051f1a3cae008efa	210
Name: syscheck.exe MD5: d5316f64948b0a12051f1a3cae008efa Size: 436.94 KB (436944 bytes) Detections: 210 Type: Executable File Path: C:\Program Files (x86)\KeyDownload\KeyPlayr\syscheck.exe Group: Malware file Last Updated: December 12, 2021
10.	kdupdsrv.exe	943341a4d968ebe720adf4ed1e6c27ca	189
Name: kdupdsrv.exe MD5: 943341a4d968ebe720adf4ed1e6c27ca Size: 220.48 KB (220480 bytes) Detections: 189 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: May 21, 2016
11.	KDUpdSrv.exe	5e663742f73d620d148673042ec8f23a	167
Name: KDUpdSrv.exe MD5: 5e663742f73d620d148673042ec8f23a Size: 217.92 KB (217920 bytes) Detections: 167 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: May 21, 2016
12.	kdupdsrv.exe	4440855c958337d91afda2e7b949c8f7	146
Name: kdupdsrv.exe MD5: 4440855c958337d91afda2e7b949c8f7 Size: 216.38 KB (216384 bytes) Detections: 146 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: July 26, 2020
13.	kdupdsrv.exe	88093e7d732bcb6af309b831115632de	79
Name: kdupdsrv.exe MD5: 88093e7d732bcb6af309b831115632de Size: 228.16 KB (228160 bytes) Detections: 79 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: May 21, 2016
14.	start_svc.exe	2ac63bff751f3320bce807353a5edc30	70
Name: start_svc.exe MD5: 2ac63bff751f3320bce807353a5edc30 Size: 59.6 KB (59600 bytes) Detections: 70 Type: Executable File Path: C:\Program Files (x86)\KeyDownload\KeyPlayr\start_svc.exe Group: Malware file Last Updated: December 12, 2021
15.	NMHClient.exe	18d4ab4a67d5c8c96c37a5800e29c518	65
Name: NMHClient.exe MD5: 18d4ab4a67d5c8c96c37a5800e29c518 Size: 428.54 KB (428544 bytes) Detections: 65 Type: Executable File Path: %PROGRAMFILES%\Keyplayer Classic Group: Malware file Last Updated: July 3, 2014
16.	NMHClient.exe	05d73f4ac451b1f50cdd4e9200dad17f	6
Name: NMHClient.exe MD5: 05d73f4ac451b1f50cdd4e9200dad17f Size: 379.39 KB (379392 bytes) Detections: 6 Type: Executable File Path: %PROGRAMFILES%\Keyplayer Classic Group: Malware file Last Updated: July 3, 2014
17.	KeyDownload-codedownloader.exe	ee7d558b85f5f98d71c0d1a5101709ea	4
Name: KeyDownload-codedownloader.exe MD5: ee7d558b85f5f98d71c0d1a5101709ea Size: 526.52 KB (526528 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: June 17, 2014
18.	KeyDownload-enabler.exe	0e41d784ae6a8324da1414782f4aef78	4
Name: KeyDownload-enabler.exe MD5: 0e41d784ae6a8324da1414782f4aef78 Size: 345.79 KB (345792 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: June 17, 2014
19.	KeyDownload-firefoxinstaller.exe	b5d889e840f1ec9daaeb0927962f7c4a	4
Name: KeyDownload-firefoxinstaller.exe MD5: b5d889e840f1ec9daaeb0927962f7c4a Size: 888.51 KB (888512 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: June 17, 2014
20.	KeyDownload-updater.exe	63555254fc4067dceea40d2ee59f1a5d	4
Name: KeyDownload-updater.exe MD5: 63555254fc4067dceea40d2ee59f1a5d Size: 356.03 KB (356032 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: June 17, 2014
21.	keyplayer.exe	fe3e8788e0c017d623be86a48a60e932	3
Name: keyplayer.exe MD5: fe3e8788e0c017d623be86a48a60e932 Size: 62.46 KB (62464 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload\KEYPLAYER Group: Malware file Last Updated: June 17, 2014
22.	KeyDownload-codedownloader.exe	08802c3fccc6883df22a56f13ad1054b	2
Name: KeyDownload-codedownloader.exe MD5: 08802c3fccc6883df22a56f13ad1054b Size: 555.71 KB (555712 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: February 14, 2014
23.	KeyDownload-enabler.exe	3e7c148a94d8fc93e334d63eebdd6773	2
Name: KeyDownload-enabler.exe MD5: 3e7c148a94d8fc93e334d63eebdd6773 Size: 407.23 KB (407232 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: February 14, 2014
24.	KeyDownload-firefoxinstaller.exe	de9d7fbcc941898a2a95486af67c9f93	2
Name: KeyDownload-firefoxinstaller.exe MD5: de9d7fbcc941898a2a95486af67c9f93 Size: 934.08 KB (934080 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: February 14, 2014
25.	KeyDownloadhelper1.exe	349544e8730e45657df05cebdfaf8570	1
Name: KeyDownloadhelper1.exe MD5: 349544e8730e45657df05cebdfaf8570 Size: 5.34 MB (5340382 bytes) Detections: 1 Type: Executable File Group: Malware file Last Updated: August 17, 2022
26.	KeyDownload-bho64.dll	33b4bd3c6689d011ed4d13157b4ab8bf	1
Name: KeyDownload-bho64.dll MD5: 33b4bd3c6689d011ed4d13157b4ab8bf Size: 970.94 KB (970944 bytes) Detections: 1 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\KeyDownload Group: Malware file Last Updated: June 17, 2014
27.	KeyPlayerV0.exe	a57433829b2fed953119b4bb85dbe884	0
Name: KeyPlayerV0.exe MD5: a57433829b2fed953119b4bb85dbe884 Size: 228.86 KB (228864 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: July 29, 2014

More files

Registry Details

Adware.KeyDownload may create the following registry entry or registry entries:

CLSID

{6FFA0D01-9182-48AA-98C9-AE5E64757FCC}

{7DDBC31B-22BD-4BBD-9F65-E8623814F3BB}

{C1EA4179-A319-4c6a-A3E5-67FF3592A12E}

File name without path

KEYPLAYER media player.lnk

KeyPlayer.lnk

HKEY..\..\..\..{RegistryKeys}

Software\AppDataLow\Software\KeyDownload1

SOFTWARE\Classes\AppID\KeyDownload.DLL

SOFTWARE\Classes\AppID\{C2178B36-2955-479B-818C-A2AE8E500454}

SOFTWARE\Classes\Applications\keyplayer.exe

SOFTWARE\Classes\AudioCD\shell\PlayWithKEYPLAYER

SOFTWARE\Classes\Directory\shell\AddToPlaylistKEYPLAYER

SOFTWARE\Classes\Directory\shell\PlayWithKEYPLAYER

SOFTWARE\Classes\DVD\shell\PlayWithKEYPLAYER

SOFTWARE\Classes\KeyDownload.KeyDownload

SOFTWARE\Classes\KeyDownload.KeyDownload.1

Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\KeyDownload1

SOFTWARE\Classes\Wow6432Node\AppID\KeyDownload.DLL

SOFTWARE\Classes\Wow6432Node\AppID\{C2178B36-2955-479B-818C-A2AE8E500454}

SOFTWARE\Clients\Media\KEYPLAYER

SOFTWARE\KeyDownload

SOFTWARE\Keyplayer Classic

Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110311051129}

Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411781116}

Software\Microsoft\Internet Explorer\Approved Extensions\{BEE7841B-3C8B-46EA-AFE9-8461458BB2C1}

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\KeyDownload-bg.exe

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\KeyDownload1-bg.exe

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1EA4179-A319-4c6a-A3E5-67FF3592A12E}

SOFTWARE\Mozilla\Firefox\Extensions\{BEE7841B-3C8B-46ea-AFE9-8461458BB2C1}

SOFTWARE\Wow6432Node\Classes\AppID\KeyDownload.DLL

SOFTWARE\Wow6432Node\Classes\AppID\{C2178B36-2955-479B-818C-A2AE8E500454}

SOFTWARE\Wow6432Node\KeyDownload

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\KeyDownload-bg.exe

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\KeyDownload1-bg.exe

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{C1EA4179-A319-4c6a-A3E5-67FF3592A12E}

SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{BEE7841B-3C8B-46ea-AFE9-8461458BB2C1}

SOFTWARE\Wow6432Node\MozillaPlugins\@keydownload.com/keyplayer,version=2.2.0-git

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

KeyDownload

{BEE7841B-3C8B-46ea-AFE9-8461458BB2C1}_is1

Directories

Adware.KeyDownload may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\KeyDownload

%APPDATA%\KeyDownload

%APPDATA%\KeyDownload1

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\eodkncoddaagiibpdlfepebiggiijkbe

%PROGRAMFILES%\KeyDownload

%PROGRAMFILES%\KeyDownload-Addon

%PROGRAMFILES%\KeyDownload1

%PROGRAMFILES%\Keyplayer Classic

%PROGRAMFILES(x86)%\KeyDownload

%PROGRAMFILES(x86)%\KeyDownload-Addon

%PROGRAMFILES(x86)%\KeyDownload1

%PROGRAMFILES(x86)%\KeyPlayer

%PROGRAMFILES(x86)%\KeyPlayer-soft

%PROGRAMFILES(x86)%\Keyplayer Classic

%USERPROFILE%\AppData\LocalLow\KeyDownload1

URLs

Adware.KeyDownload may call the following URLs:

KeyDownload

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Adware.KeyDownload

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Adware.KeyDownload

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

GlobalSearchSystem

Worlddailynewz.com

Ryattractiuvea.biz

Most Viewed

Is Lookmovie.io Safe?

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error