DownSavee

DownSavee

Known Toolbar

by InstalleRex-WebPick

What is DownSavee?

DownSavee is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. DownSavee's installer is typically 1.00 MB in size and installs around 7 files.

DownSavee is most popular in the United States with 82.67% of installations residing in this country.

About DownSavee?

DownSave is a web browser extension developed by JustPlug.It and is distributed through the WebPick (InstalleRex) download and install manager. This cross browser extension consists of a Windows service, an auto-starting component, and a browser toolbar/plugin that is designed to insert advertisements in the browser in the form of banner ads, hyper-text links, and popups. It may also hijack existing advertising on websites and inject affiliate codes in links as coupon offers. Moreover, DownSave has been known to display deceptive malvertising ads for 'required' updates of common programs and unwanted pop-ups advertisements. Installation of the program may result in the installation of bundled adware utilities and additional browser extensions. Additionally, the program may modify the browser's default security settings.

Multiple virus scanners have detected malware in DownSavee.

4.exe (MD5: ef38514253e4dafb6823f236bc47bb5f) has been flagged by 9 scanners:
Scanner Software Result
AVG Generic5.AOBP
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.S
Malwarebytes PUP.Optional.MultiPlug.A
Qihoo-360 HEUR/Malware.QVM10.Gen
Trend Micro ADW_MULTIPLUG
TrendMicro-HouseCall ADW_MULTIPLUG
AhnLab-V3 Trojan/Win32.Preloader
Baidu-International Adware.Win64.MultiPlug.A
4.x64.dll (MD5: 600ff6994d8cddce04773e8c738d303d) has been flagged by 19 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win64.Preloader
Baidu-International Adware.Win64.MultiPlug.81
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win64/Adware.MultiPlug.C
G Data Win64.Adware.Megasearch.C
IKARUS anti.virus AdWare.MultiPlug
Malwarebytes PUP.Optional.MultiPlug.A
McAfee RDN/Generic PUP.x!c2k
McAfee-GW-Edition RDN/Generic PUP.x!c2k
Symantec Adware.BL
TrendMicro-HouseCall TROJ_GEN.R0E6H05EU14
VIPRE Antivirus Trojan.Win32.Generic!BT
Avira AntiVir ADWARE/Adware.Gen
AVG Generic5.ALFJ
K7 AntiVirus Adware ( 004923a41 )
K7GW Adware ( 004923a41 )
Rising Antivirus PE:Malware.Adware!6.1293
Qihoo-360 HEUR/Malware.QVM10.Gen
Trend Micro ADW_MULTIPLUG
4.dll (MD5: 6bdd2b931e45fa910c821a3beb07928c) has been flagged by 34 scanners:
Scanner Software Result
Lavasoft Ad-Aware Application.Generic.604038
Agnitum Outpost PUA.BHO!
Antiy-AVL Trojan/Win32.TGeneric
avast! Win32:Dropper-gen [Drp]
AVG Generic5.APQB
Baidu-International Adware.Win32.BHO.71
Bitdefender Application.Generic.604038
Bkav FE W32.ToolbarEscort.Adware
CAT-QuickHeal AdWare.BHO.r6 (Not a Virus)
Comodo Security ApplicUnwnt.Win32.InstallRex.ALC
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.T
F-Secure Application.Generic.604038
G Data Application.Generic.604038
IKARUS anti.virus Win32.SuspectCrc
K7 AntiVirus Adware ( 004976341 )
K7GW Adware ( 004976341 )
Kaspersky not-a-virus:AdWare.Win32.BHO.bdnc
Malwarebytes PUP.Optional.MultiPlug.A
McAfee RDN/Generic PUP.x!cf3
McAfee-GW-Edition RDN/Generic PUP.x!cf3
MicroWorld-eScan Application.Generic.604038
NANO AntiVirus Riskware.Win32.BHO.dbdfeq
Panda Antivirus Trj/CI.A
Sophos Generic PUA IO
Symantec Adware.BL
Trend Micro ADW_MULTIPLUG
TrendMicro-HouseCall ADW_MULTIPLUG
Vba32 AntiVirus AdWare.BHO
VIPRE Antivirus Trojan.Win32.Generic!BT
AhnLab-V3 Dropper/Win32.Preloader
Avira AntiVir SPR/Tool.460800.1
Fortinet FortiGate Riskware/MultiPlug
Rising Antivirus PE:Malware.Adware!6.1293
Qihoo-360 HEUR/Malware.QVM10.Gen
N0vP1Ev2kZ.exe (MD5: 83c728a3d4b56127985b096478a943f8) has been flagged by 27 scanners:
Scanner Software Result
Lavasoft Ad-Aware Application.Generic.623657
Agnitum Outpost PUA.MultiPlug!
AhnLab-V3 Dropper/Win32.Preloader
Avira AntiVir SPR/Tool.460800.1
AVG Generic_r.JW
Baidu-International Adware.Win32.MultiPlug.81
Bitdefender Application.Generic.623657
Bkav FE W32.PatgeasM.Trojan
Comodo Security Application.Win32.MultiPlug.SJ
Fortinet FortiGate Riskware/MultiPlug
F-Secure Application.Generic.623657
G Data Application.Generic.623657
K7 AntiVirus Adware ( 004976341 )
K7GW Adware ( 004976341 )
Malwarebytes PUP.Optional.MultiPlug.A
McAfee RDN/Generic.dx!dcf
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan Application.Generic.623657
Panda Antivirus Trj/Genetic.gen
TrendMicro-HouseCall TROJ_GEN.R0CBH06ES14
VIPRE Antivirus Trojan.Win32.Generic!BT
ESET-NOD32 a variant of Win64/Adware.MultiPlug.C
IKARUS anti.virus AdWare.MultiPlug
Symantec Adware.BL
Rising Antivirus PE:Malware.Adware!6.1293
Qihoo-360 HEUR/Malware.QVM10.Gen
Trend Micro ADW_MULTIPLUG
LFV.x64.dll (MD5: 9e0383fb82ce83bd785951c20f3fe959) has been flagged by 4 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win32.Preloader
Baidu-International Adware.Win64.MultiPlug.A
ESET-NOD32 a variant of Win64/Adware.MultiPlug.A
Malwarebytes PUP.Optional.MultiPlug.A

Software Details

URL:
–
Support:
–
Installation path:
C:\ProgramData\downsavee
Uninstaller:
"C:\ProgramData\DownSavee\LFV.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
Size:
1.00 MB
Language:
English

DownSavee Executable Details

Primary executable:
LFV.exe
Name:
DownSavee
Path:
C:\ProgramData\downsavee\LFV.exe
MD5:
f5bff621c4c58358b36f8526dec8a264
SHA-1:
–
SHA-256:
–
Files installed by DownSavee
File Type Filename MD5
EXE
4.exe
Adware
ef38514253e4dafb6823f236bc47bb5f
DLL
4.x64.dll
Malware
600ff6994d8cddce04773e8c738d303d
DLL
4.dll
Malware
6bdd2b931e45fa910c821a3beb07928c
EXE
N0vP1Ev2kZ.exe
Malware
83c728a3d4b56127985b096478a943f8
DLL
LFV.x64.dll
Malware
9e0383fb82ce83bd785951c20f3fe959
DLL
LFV.dll
Malware
1550537f5aee53fec3b74eb4605f8483
EXE
LFV.exe
Malware
f5bff621c4c58358b36f8526dec8a264