84,488,480 programs installed

Should I remove weDownload?

What percent of users and experts removed it?
75% remove it25% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #22,734
United States Rank #14,375
Reach 0.0085%
Lifespan of installation (until removal)
< 14.91 days
439.93 days >
Average installed length: 231.15 days

Versions

VersionDistribution
1.31.153.0 28.57%
1.30.153.1 7.74%
1.27.153.10 61.90%
1.27.153.8 1.79%

weDownload

What is weDownload?

WeDownload is a potentially unwanted web browser extension and Browser helper Object (for Internet Explorer) that delivers contextual based advertising to the web browser. In addition it will modify the user's browser home and search pages as well as 'New Tab' pages to push advertising and search.The software also bundled various potentially unwanted applications by the same publisher as well as third party apps.

About  (from weDownload Ltd)

We are involved in software distribution via our installer platform (weDownload Manager) and via our download and reviews website toDownload.com. Also we are involved in software development and software publishing via our own software products like SmartPCFix.

Overview

The most used version is 1.27.153.10, with over 98% of all installations currently using this version. During setup, the program registers itself to launch on boot through a Windows Schedule Task in order to automatically start-up (this is typically done to avoid any UAC prompts). It adds a Browser Helper Object (BHO) to Internet Explorer. The main program executable is utils.exe. Typically most users end up uninstalling this just after a few days. The software installer includes 16 files and is usually about 5.8 MB (6,077,200 bytes). weDownload-updater.exe is the automatic update component of the software designed to download and apply new updates should new versions be released.

The program is built using the Crossrider framework, a cross browser monetization platform used to deploy a toolbar and extension for modern web browsers with monetization features including browser search and homepage redirection, contextual coupons and in-line text advertising. Crossrider extensions include background processes to monitor, update and automatically download new features/code without direct user interaction.
  • Possible malware installed by this program
  • Automatically starts with Windows
  • Loads into the web browser
  • Built on the Crossrider toolbar platform and potentially unwanted
  • May inject ads in the web browser
  • 'Offers' to modify the browser's home and search pages by default
  • Difficult to remove as it will reinstall itself
  • Known to include offers within the setup
  • Many experts agree, if you don't use it you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in weDownload.
utils.exe (3aaf79e22fa8ed6e5efe0d4484a642cb) has been flagged by the following 4 scanners:
Anti-Virus softwareVersionDetection
Baidu-International 4.0.3.14126 Trojan.Win32.Packed.aZ
ESET-NOD32 8.8985 Win32/Packed.ScrambleWrapper.C
Symantec 1/26/2014 rev. 1 WS.Reputation
TrendMicro-HouseCall 7.2.297 TROJ_GEN.F47V0716
weDownload-updater.exe (994d74e080febf782c91d5dbc275a304) has been flagged by the following 11 scanners:
Anti-Virus softwareSoftware versionDetection
AVG 13.0.0.3169 Generic_r.GS
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.J
Dr.Web Trojan.Crossrider.32
ESET-NOD32 9257 a variant of Win32/Toolbar.CrossRider.J
K7 AntiVirus 9.175.10750 Trojan ( 0048c68d1 )
K7GW 9.175.10750 Trojan ( 0048c68d1 )
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
McAfee 5.600.0.1067 Artemis!994D74E080FE
McAfee-GW-Edition 2013 Artemis!994D74E080FE
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.F47V1028
VIPRE Antivirus 25156 Crossrider (fs)
weDownload-bho.dll (6e33114fe670eb2088eac46e4ad27de0) has been flagged by the following 8 scanners:
Anti-Virus softwareSoftware versionDetection
Dr.Web Trojan.Crossrider.1
ESET-NOD32 8889 a variant of Win32/Toolbar.CrossRider.H
McAfee 5.600.0.1067 Artemis!6E33114FE670
McAfee-GW-Edition 2013 Artemis!6E33114FE670
Symantec 20131.1.5.61 WS.Reputation.1
Trend Micro 9.740.0.1012 ADW_GAMEPLAYLABS
TrendMicro-HouseCall 9.700.0.1001 ADW_GAMEPLAYLABS
VIPRE Antivirus 22192 Crossrider (fs)
weDownload-codedownloader.exe (97da8e17c0ff8c759c8c61c3b29dab50) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Trojan.Win32.Toolbar.CrossRider.J
Dr.Web Trojan.Crossrider.1
ESET-NOD32 9022 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
McAfee-GW-Edition 2013 Heuristic.BehavesLike.Win32.Suspicious-BAY.K
VIPRE Antivirus 23156 Crossrider (fs)
weDownload-firefoxinstaller.exe (9ca06a46aee0910ce983794eb89d700d) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.K
ESET-NOD32 9190 a variant of Win32/Toolbar.CrossRider.K
McAfee 6.0.4.564 Artemis!9CA06A46AEE0
McAfee-GW-Edition 2013 Artemis!9CA06A46AEE0
Symantec 20131.1.5.61 WS.Reputation.1
VIPRE Antivirus 24754 Crossrider (fs)
weDownload-chromeinstaller.exe (53775160b02c2c2b4d4b0f859ae6ee71) has been flagged by the following 5 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.K
ESET-NOD32 9190 a variant of Win32/Toolbar.CrossRider.K
McAfee 6.0.4.564 Artemis!53775160B02C
McAfee-GW-Edition 2013 Artemis!53775160B02C
VIPRE Antivirus 24752 Crossrider (fs)
weDownload-enabler.exe (d91dc8ec3e3e9dcfb0e244a911f79e2c) has been flagged by the following 5 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.K
ESET-NOD32 9190 a variant of Win32/Toolbar.CrossRider.K
McAfee 6.0.4.564 Artemis!D91DC8EC3E3E
McAfee-GW-Edition 2013 Artemis!D91DC8EC3E3E
VIPRE Antivirus 24754 Crossrider (fs)
       View all 45 all detections
weDownload has been seen bundling various 3rd party software during the installation process. Make sure to check for and remove unused programs.

Program detailsProgram details

Displayed publisher: weDownload
URL: www.wedownload.com
Installation folder: C:\Program Files\wedownload
Uninstaller: C:\Program Files\weDownload\Uninstall.exe /fromcontrolpanel=1
Estimated size: 5.8 MB

Program filesFiles installed by weDownload

Program executable:utils.exe (Malware detected)
Name:weDownload
weDownload Installer
Path:C:\Program Files\wedownload\utils.exe
MD5:3aaf79e22fa8ed6e5efe0d4484a642cb
Additional files:
  • weDownload-bg.exe - weDownload (weDownload exe)
  • (Malware detected) weDownload-bho.dll - weDownload BHO
  • weDownload-bho64.dll
  • weDownload-buttonutil.exe
  • weDownload-buttonutil64.exe
  • weDownload-chromeinstaller.exe
  • weDownload-codedownloader.exe
  • (Malware detected) weDownload-enabler.exe
  • weDownload-firefoxinstaller.exe
  • weDownload-updater.exe
  • Uninstall.exe
  • weDownload-buttonutil.dll
  • weDownload-buttonutil64.dll
  • weDownload-helper.exe

Program behaviorsBehaviors exhibited

2 Internet Explorer BHOs
  • weDownload-bho64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'weDownload' with the class of {11111111-1111-1111-1111-110411581120} (CrossriderApp0045820).
  • weDownload-bho.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'weDownload' with the class of {11111111-1111-1111-1111-110411581120} (CrossriderApp0045820).
5 Scheduled Tasks (Boot/Login)
  • weDownload-firefoxinstaller.exe is automatically launched at startup through a scheduled task named weDownload-firefoxinstaller.
  • weDownload-updater.exe is automatically launched at startup through a scheduled task named weDownload-updater.
  • weDownload-enabler.exe is automatically launched at startup through a scheduled task named weDownload-enabler.
  • weDownload-codedownloader.exe is automatically launched at startup through a scheduled task named weDownload-codedownloader.
  • weDownload-chromeinstaller.exe is automatically launched at startup through a scheduled task named weDownload-chromeinstaller.

How do I remove weDownload?

You can uninstall weDownload from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program weDownload, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove weDownload.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by weDownload you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 61%
Win XP 1%
 
HOW IT STARTS
Scheduled task? Yes
(Runs on Windows boot)
 
USER ACTIONS
Uninstall it 75%
Keep it 25%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 67.26%
Windows 10 21.43%
Windows Vista 5.95%
Windows XP 5.36%
Which OS releases does it run on?
Windows 7 Home Premium 42.86%
Windows 7 Ultimate 14.88%
Windows 8 7.74%
Windows 8.1 7.74%
Windows 7 Professional 6.55%
Microsoft Windows XP 5.36%

Distribution by countryGeography

79.92% of installs come from the United States
Which countries install it?
  United States 79.92%
  India 4.60%
  Romania 3.35%
  Germany 2.93%
  Australia 1.67%
  Iran 0.84%
  Netherlands 0.84%
  Italy 0.84%
  United Kingdom 0.84%
  South Africa 0.42%
  Brazil 0.42%
  Taiwan 0.42%
  Belgium 0.42%
  France 0.42%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 29.75%
Dell 27.27%
Acer 12.40%
ASUS 9.92%
Lenovo 9.09%
Toshiba 3.31%
Alienware 1.65%
Samsung 1.65%
MSI 1.65%
Sony 1.65%
Intel 0.83%
American Megatrends 0.83%
Common models
HP 2000 Notebook PC 2.80%
ASUSTeK K54C 1.87%
Dell Dell DXC061 1.87%
HP Pavilion g7 Notebook P... 1.87%
ASUSTeK X501U 1.87%
Dell Inspiron N5050 1.87%

comments3 comments

user comment
user comment
I also hate junkwareover a year ago
Accidentally installed it. Causes all sorts of mischief. And very difficult to uninstall. Definitely avoid this software, and the website that uses it, soft32.com
user comment
Chargerover a year ago
Numerous attempts to uninstall through control panel/uninstall failed.
user comment
I Hate Junkwareover a year ago
The developer forgot to mention that weDownload causes numerous popups, redirects, and frequent browser crashes. On Windows 7 x64, Chrome crashes immediately when typing in the address bar. Avoid this software unless absolutely necessary.