1CLICKDOWNLOADER.EXE is Tools 1CLICKDOWNLOADER

June 29, 2012 by NightWatcher
Filed under: Tools 
: Solved!

Fix it immediately:

The file 1CLICKDOWNLOADER.EXE is not a virus.
The program 1CLICKDOWNLOADER.EXE is a system security tool.
But the 1CLICKDOWNLOADER.EXE tool may be used to compromise computer security by the hacker.
Use the 1CLICKDOWNLOADER.EXE file at your own risk!
You can delete the 1CLICKDOWNLOADER.EXE program from your computer with problems.

Malware Analysis of 1CLICKDOWNLOADER.EXE
Full path on a computer: %Program Files%\1ClickDownload\1ClickDownloader.exe

Detected by UnHackMe:

1CLICKDOWNLOADER.EXE
Default location: %Program Files%\1ClickDownload\1ClickDownloader.exe

1CLICKDOWNLOADER.EXE is known as:

Tools.1CLICKDOWNLOADER

1CLICKDOWNLOADER.EXE hash:

  • MD5: 46e935d6c389fb7a3b7e4a62534d5903
The file tries to connect to the dangerous web site.
How to quickly detect 1CLICKDOWNLOADER.EXE presence?

Folders:
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\defaults
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\defaults\preferences
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\locale
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\locale\en-US
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-32bits
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits
  • %Program Files%\1ClickDownload
  • %Program Files%\Gophoto.it
Files:
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\gophoto@gophoto.it.xpi
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\browser.xul
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\dt.txt
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\jquery.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\ready.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome\content\util.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\chrome.manifest
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\defaults\preferences\prefs.js
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\install.rdf
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\locale\en-US\translations.dtd
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin\icon16.png
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin\icon48.png
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\OneClickDownload@OneClickDownload.com\skin\skin.css
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\AUTODESK 2011 Product Keys.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\install.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\Instruction.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\Serial.txt
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-32bits\xf-a2011-32bits.exe
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-32bits\xf-a2011-32bits.rar
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits\xf-a2011-64bits.exe
  • %Desktop%\Autodesk 2011 Products (x68 & x64) [h33t.com] Keygen-Only-X-FORCE\X-Force-A2011-64bits\xf-a2011-64bits.rar
  • %Desktop%\Download Autodesk_2011_Products_[x86_&_x64]_[h33t.lnk
  • %Temp%\nsq3.tmp
  • %Program Files%\1ClickDownload\1clextsetup.exe
  • %Program Files%\1ClickDownload\1Click.cfg
  • %Program Files%\1ClickDownload\1ClickDownloader.exe
  • %Program Files%\1ClickDownload\Autodesk_2011_Products_[x86_&_x64]_[h33t.torrent
  • %Program Files%\1ClickDownload\mainpackfa.exe
  • %Program Files%\1ClickDownload\oneclickdownloader10.crx
  • %Program Files%\1ClickDownload\uninst.exe
  • %Program Files%\Gophoto.it\gophotoit10.crx


  • Recommended: UnHackMe anti-rootkit and anti-malware

    Premium software: RegRun Security Suite (Good choice for removal and protection)

    Written by

    Malware Hunter.

    Tags: 1CLICKDOWNLOADER, 1CLICKDOWNLOADER.EXE, Tools

    Comments

    Tell me what you're thinking...
    and oh, if you want a pic to show with your comment, go get a gravatar!

    You must be logged in to post a comment.