Threat Database Adware Adware.Savings Bull

Adware.Savings Bull

By Domesticus in Adware

Threat Scorecard

Ranking: 8,109
Threat Level: 20 % (Normal)
Infected Computers: 6,729
First Seen: January 31, 2014
Last Seen: September 16, 2023
OS(es) Affected: Windows

Adware.Savings Bull is adware which, once installed on a computer, may insert an unwanted plug-in, add-on or browser extension. Adware.Savings Bull may surreptitiously invade and integrate itself into the computer without the PC user's consent. Adware.Savings Bull may make changes to the default system and Web browser settings that later may lead to numerous problems. Adware.Savings Bull may propagate and access the PC through packed free applications. Computer users may download free software they want from a variety of questionable download websites that may add Adware.Savings Bull with its toolbar into the program installation package. Adware.Savings Bull may show disturbing pop-up advertisements that may encompass sponsored links to multiple unknown websites that may offer computer users various sales, discount coupons, deals and other offers for online services and products.

SpyHunter Detects & Remove Adware.Savings Bull

File System Details

Adware.Savings Bull may create the following file(s):
# File Name MD5 Detections
1. savingsbullfilterservice64.exe 17012c1572fddf039bc6519cbdcd9faf 1,598
2. SavingsbullFilterService64.exe.vir dcaaae1853705276bba8ba3298310f9b 373
3. netfilter64.sys 3e71b9d55ede56bf5e11e923c0d09874 365
4. SavingsbullFilterService.exe f72e6d5a25bbd0a04e982361c88461e7 82
5. netfilter64.sys 5fbdc88f22270fe741152a2fbd39b160 78
6. savingsbull_install.exe 2193be8908d6d055b5bc1c0625e7ce51 0
7. setup.exe 069781880e105da2b62071a732270bf0 0

Registry Details

Adware.Savings Bull may create the following registry entry or registry entries:
Software\AppDataLow\Software\Savings Bull
Software\AppDataLow\Software\SavingsBull
SOFTWARE\Classes\Installer\Features\1708EDD6AB4EB164A86999D0AF0ABE1D
SOFTWARE\Classes\Installer\Features\526AB318AF0B8D84B9579557C9882C91
SOFTWARE\Classes\Installer\Products\1708EDD6AB4EB164A86999D0AF0ABE1D
SOFTWARE\Classes\Installer\Products\526AB318AF0B8D84B9579557C9882C91
SOFTWARE\Classes\Installer\UpgradeCodes\0AF447A0D1AB4F544A6C8E2761E4083F
SOFTWARE\Classes\Installer\UpgradeCodes\622C9E6E584F99842A59BEAC785FA79C
SOFTWARE\Classes\Installer\UpgradeCodes\622C9E6E584F99842A59BEAC785FA79C\526AB318AF0B8D84B9579557C9882C91
Software\Microsoft\Internet Explorer\Approved Extensions\{10AD2C61-0898-4348-8600-14A342F22AC3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\0AF447A0D1AB4F544A6C8E2761E4083F
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\622C9E6E584F99842A59BEAC785FA79C
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\622C9E6E584F99842A59BEAC785FA79C\526AB318AF0B8D84B9579557C9882C91
Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\58EA3283-EBEE-43E4-9B29-44C6E16C6B48
SOFTWARE\Savings Bull
Software\SavingsBull
SOFTWARE\SavingsBull Filter
SOFTWARE\SavingsbullFilter
SOFTWARE\Wow6432Node\SavingsbullFilter
SYSTEM\ControlSet001\Services\Eventlog\Application\SavingsBullFilterService
SYSTEM\ControlSet001\services\eventlog\Application\SavingsbullFilterService64
SYSTEM\ControlSet001\Services\SavingsbullFilterService
SYSTEM\ControlSet001\services\SavingsbullFilterService64
SYSTEM\ControlSet002\Services\Eventlog\Application\SavingsBullFilterService
SYSTEM\ControlSet002\Services\SavingsbullFilterService
SYSTEM\CurrentControlSet\services\eventlog\Application\SavingsbullFilterService64
SYSTEM\CurrentControlSet\Services\SavingsbullFilterService
SYSTEM\CurrentControlSet\services\SavingsbullFilterService64

Directories

Adware.Savings Bull may create the following directory or directories:

%PROGRAMFILES%\Savings Bull
%PROGRAMFILES%\SavingsBull
%PROGRAMFILES%\SavingsbullFilter
%PROGRAMFILES(X86)%\Savings Bull
%PROGRAMFILES(X86)%\SavingsBull
%PROGRAMFILES(X86)%\SavingsbullFilter
%WINDIR%\Installer\{6DDE8071-E4BA-461B-8A96-990DFAA0EBD1}
%WINDIR%\Installer\{813BA625-B0FA-48D8-9B75-59759C88C219}

URLs

Adware.Savings Bull may call the following URLs:

SavingsBull

Trending

Most Viewed

Loading...