DownloadHQ

DownloadHQ

Known Malware

by DownloadHQ Group

What is DownloadHQ?

DownloadHQ is software application developed by DownloadHQ Group. It is most commonly found on computers running Windows 7 with nearly 67.44% of installations running this operating system. DownloadHQ's installer is typically 4.00 MB in size and installs around 5 files.

DownloadHQ is most popular in the United States with 70.49% of installations residing in this country.

DownloadHQ adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, DownloadHQ is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About DownloadHQ?

DownloadHQ is a bundled installation utilizing a download monetization platform. It should be noted that installing the co-bundled software through the modified installer may be a mandatory step. The product is available for free on the distribution site and provides users with additional bundle products, which may include advertisements. However, users have the option to opt out of these additional offerings and install the software without any extra programs.

Multiple virus scanners have detected malware in DownloadHQ.

DownloadHQ.exe (MD5: a500317c8443ff0e89028ec7304bf9f3) has been flagged by 3 scanners:
Scanner Software Result
Comodo Security Heur.Suspicious
Trend Micro ADW_KRADARE
TrendMicro-HouseCall ADW_KRADARE

Software Behaviors

Services:
  • chatServer.exe runs as a service named 'Ares Chatroom server' (AresChatServer) "Hosts your chatroom on the Ares network.".
Firewall:
  • chatServer.exe is added as a firewall exception for 'C:\Program Files\Ares\chatServer.exe'.
  • DownloadHQ.exe is added as a firewall exception for 'C:\Program Files\DownloadHQ\DownloadHQ.exe'.
Scheduled tasks:
  • chatServer.exe is scheduled as a task with the class '{37D3EC0A-6273-4D20-8CE2-CC6294CAA141}' (runs on registration).

Startup Entries

Registry entries:
  • chatServer.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'AresChatServer' and executes as C:\Program Files\Ares\chatServer.exe.
  • DownloadHQ.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'downloadhq' and executes as "C:\Program Files\DownloadHQ\DownloadHQ.exe" -h.

Software Details

URL:
https://download-hq.net
Support:
Installation path:
C:\Program Files\downloadhq
Uninstaller:
"C:\Program Files\DownloadHQ\uninstall.exe"
Size:
4.00 MB
Language:
English

DownloadHQ Executable Details

Primary executable:
DownloadHQ.exe
Name:
DownloadHQ
Path:
C:\Program Files\downloadhq\DownloadHQ.exe
MD5:
a500317c8443ff0e89028ec7304bf9f3
SHA-1:
SHA-256:
Files installed by DownloadHQ
File Type Filename MD5
EXE
550cfff64dfc5bc6ddabab7905bbce6a
DLL
38473d7a84ab44517dec3d9327764cc9
DLL
fd5abedf547602eaa107ddbeba50cdc7
EXE
eb7319da35fff406c2afd912f8268f4c
EXE
a500317c8443ff0e89028ec7304bf9f3