Adware.DownSave

By GoldSparrow in Adware

Threat Scorecard

Ranking:	7,717
Threat Level:	20 % (Normal)
Infected Computers:	4,375

First Seen:	May 28, 2014
Last Seen:	September 20, 2023
OS(es) Affected:	Windows

Adware.DownSave is adware that may produce and display intrusive random advertisements on the computer when the PC user is visiting shopping-related and social networking websites. The pop-up advertisements shown by Adware.DownSave may give PC users numerous discount coupons, sales, deals and offers. If the computer user clicks on the pop-up ads delivered by Adware.DownSave, it may unwillingly reroute him to suspicious websites that may be promotional. Adware.DownSave may be installed into Internet Explorer, Mozilla Firefox and Google Chrome Web browsers while the computer user is installing freeware from the Internet. After installation on the computer system, Adware.DownSave may change the custom browser parameters and modify the default start page, search engine and a new tab page with an unreliable website. Adware.DownSave may trace the PC user's Internet surfing activity and send and use collected data for unknown marketing purposes.

Table of Contents

SpyHunter Detects & Remove Adware.DownSave

File System Details

Adware.DownSave may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	DfOikEyrJ.x64.dll	29191683f396a123ca9a53f3ef503a73	2
Name: DfOikEyrJ.x64.dll MD5: 29191683f396a123ca9a53f3ef503a73 Size: 476.67 KB (476672 bytes) Detections: 2 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DoWnSave Group: Malware file Last Updated: May 28, 2014
2.	Z.dll	629a85fe3f3a18792c5106d7bcd338f3	2
Name: Z.dll MD5: 629a85fe3f3a18792c5106d7bcd338f3 Size: 425.47 KB (425472 bytes) Detections: 2 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DOwnSave Group: Malware file Last Updated: May 28, 2014
3.	R9DQQv.x64.dll	37ae4bb2f20ca4f2ecc2ae3fa2eee59f	1
Name: R9DQQv.x64.dll MD5: 37ae4bb2f20ca4f2ecc2ae3fa2eee59f Size: 476.67 KB (476672 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSavei Group: Malware file Last Updated: May 28, 2014
4.	zvG.dll	103122a3729dbd73e0751688d046610a	1
Name: zvG.dll MD5: 103122a3729dbd73e0751688d046610a Size: 426.49 KB (426496 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSave Group: Malware file Last Updated: May 28, 2014
5.	ex3NW5.x64.dll	a7f83e82a8b6e11de5ea62efee860351	1
Name: ex3NW5.x64.dll MD5: a7f83e82a8b6e11de5ea62efee860351 Size: 473.6 KB (473600 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSaVe Group: Malware file Last Updated: May 28, 2014
6.	WqClrP.x64.dll	b614cb72894e75e8df5092746d3c5705	1
Name: WqClrP.x64.dll MD5: b614cb72894e75e8df5092746d3c5705 Size: 472.57 KB (472576 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSave Group: Malware file Last Updated: May 28, 2014
7.	PMzRH91o.x64.dll	bbdb948208d7d37f01dc04e6cbb4e71a	1
Name: PMzRH91o.x64.dll MD5: bbdb948208d7d37f01dc04e6cbb4e71a Size: 473.08 KB (473088 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DDowNSAve Group: Malware file Last Updated: May 28, 2014
8.	twh8j.x64.dll	631ebe123ecceeac45c25a2e20306e78	1
Name: twh8j.x64.dll MD5: 631ebe123ecceeac45c25a2e20306e78 Size: 475.13 KB (475136 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DowNSave Group: Malware file Last Updated: May 28, 2014
9.	twh8j.dll	64abc957845f504506bed87543dca48c	1
Name: twh8j.dll MD5: 64abc957845f504506bed87543dca48c Size: 425.47 KB (425472 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DowNSave Group: Malware file Last Updated: May 28, 2014
10.	BxRK7cNl.dll	db12f6284aba0a58615c4e8ad62a3ec5	1
Name: BxRK7cNl.dll MD5: db12f6284aba0a58615c4e8ad62a3ec5 Size: 424.44 KB (424448 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSave Group: Malware file Last Updated: May 28, 2014
11.	C.x64.dll	c8625b7c0f5a6d22c9bf4eeea9ec5f00	1
Name: C.x64.dll MD5: c8625b7c0f5a6d22c9bf4eeea9ec5f00 Size: 475.64 KB (475648 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSavE Group: Malware file Last Updated: May 28, 2014
12.	grsWp.dll	56efa3b2409ec8f402a9bf465def9afe	1
Name: grsWp.dll MD5: 56efa3b2409ec8f402a9bf465def9afe Size: 426.49 KB (426496 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DDowNSavei Group: Malware file Last Updated: May 28, 2014
13.	G4I.x64.dll	702a1113559c8f2b95d919f15a962d9a	1
Name: G4I.x64.dll MD5: 702a1113559c8f2b95d919f15a962d9a Size: 476.67 KB (476672 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSave Group: Malware file Last Updated: May 28, 2014
14.	3mZr.x64.dll	d0791521bfe1248d995122f8f2684ee1	1
Name: 3mZr.x64.dll MD5: d0791521bfe1248d995122f8f2684ee1 Size: 475.64 KB (475648 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSavee Group: Malware file Last Updated: May 28, 2014
15.	HWik.dll	3edf79b76fd875a74d02c141983a6774	1
Name: HWik.dll MD5: 3edf79b76fd875a74d02c141983a6774 Size: 427 KB (427008 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DOwnSave Group: Malware file Last Updated: May 28, 2014
16.	DBR.x64.dll	3e552f61a7ab6b5266c11fd3533f22f8	1
Name: DBR.x64.dll MD5: 3e552f61a7ab6b5266c11fd3533f22f8 Size: 475.64 KB (475648 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DOwnSAVe Group: Malware file Last Updated: May 28, 2014
17.	ZlwgBOJvX.x64.dll	2885ce5725d5f37867de473899c5097c	1
Name: ZlwgBOJvX.x64.dll MD5: 2885ce5725d5f37867de473899c5097c Size: 471.04 KB (471040 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSave Group: Malware file Last Updated: May 28, 2014
18.	rNYImj1v.dll	251663ab1aed04f2e8d1c4132fcf7638	1
Name: rNYImj1v.dll MD5: 251663ab1aed04f2e8d1c4132fcf7638 Size: 425.47 KB (425472 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSAve Group: Malware file Last Updated: May 28, 2014
19.	do.dll	1900c268b3f17ec68cb463de2606956d	1
Name: do.dll MD5: 1900c268b3f17ec68cb463de2606956d Size: 423.93 KB (423936 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\Dane aplikacji\DownSAve Group: Malware file Last Updated: May 28, 2014
20.	R5Y.dll	693c04619316e64d4cde981c3cf193cc	1
Name: R5Y.dll MD5: 693c04619316e64d4cde981c3cf193cc Size: 424.96 KB (424960 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\Dane aplikacji\DownSaveE Group: Malware file Last Updated: May 28, 2014
21.	M.dll	737f2e2524cde0854be0f94c03921be0	1
Name: M.dll MD5: 737f2e2524cde0854be0f94c03921be0 Size: 423.42 KB (423424 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\Application Data\DownSave Group: Malware file Last Updated: May 28, 2014
22.	g.dll	0e3542dffc5be4a409e036db9c73d4e9	1
Name: g.dll MD5: 0e3542dffc5be4a409e036db9c73d4e9 Size: 426.49 KB (426496 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSave Group: Malware file Last Updated: May 28, 2014
23.	17eGOVLzdA.x64.dll	3118c03f55f1973105a9fb4aab0d8eea	1
Name: 17eGOVLzdA.x64.dll MD5: 3118c03f55f1973105a9fb4aab0d8eea Size: 474.62 KB (474624 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DowNSaVe Group: Malware file Last Updated: May 28, 2014
24.	z.dll	4f0e57d09310d4f684cd65f454130460	1
Name: z.dll MD5: 4f0e57d09310d4f684cd65f454130460 Size: 427.52 KB (427520 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\Datos de programa\DownSave Group: Malware file Last Updated: May 28, 2014
25.	GDs.dll	4f87d11ef47f6a99c58f7a7f5a867fab	1
Name: GDs.dll MD5: 4f87d11ef47f6a99c58f7a7f5a867fab Size: 421.88 KB (421888 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\DownSavee Group: Malware file Last Updated: May 28, 2014

More files

Registry Details

Adware.DownSave may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{5E89CCA9-B9B8-FC18-23F6-0EA90BFF2507}

SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6A471BE0-7449-CF10-6F5A-A3EDE81789E6}

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

{E5B7E1B4-21FC-6765-A3D7-BA0416DC6AF7}

Directories

Adware.DownSave may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\DownSave

%ALLUSERSPROFILE%\DownSave

%ALLUSERSPROFILE%\DowunSave

%PROGRAMFILES%\DownSave

%PROGRAMFILES(x86)%\DownSave

URLs

Adware.DownSave may call the following URLs:

DownSaVe

DownSavE

DownSave

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Adware.DownSave

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Adware.DownSave

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

'YouPorn' Email Scam

Safe Search Eng

Findtheirreport.com

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen