Adware.SupraSavings Removal Report

Table of Contents

SpyHunter Detects & Remove Adware.SupraSavings

File System Details

Adware.SupraSavings may create the following file(s):

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	SupraSavingsService.exe	681dbdb073c53a0de831bcb8e2ef0348	7,104
Name: SupraSavingsService.exe MD5: 681dbdb073c53a0de831bcb8e2ef0348 Size: 151.04 KB (151040 bytes) Detections: 7,104 Type: Executable File Path: C:\Program Files\54C1CAEC-3448-4C94-8EF7-1313689B8F99\SupraSavingsService.exe Group: Malware file Last Updated: July 17, 2022
2.	SecureAssist.exe	62bdfc12003eec8f2b3d504a2d4bfd3e	1,479
Name: SecureAssist.exe MD5: 62bdfc12003eec8f2b3d504a2d4bfd3e Size: 1.55 MB (1558032 bytes) Detections: 1,479 Type: Executable File Path: C:\Program Files\suprasavings\SecureAssist.exe Group: Malware file Last Updated: June 15, 2023
3.	2rs3.dll	1d46ff880607a51644baad5dde0498b5	1,457
Name: 2rs3.dll MD5: 1d46ff880607a51644baad5dde0498b5 Size: 91.1 KB (91104 bytes) Detections: 1,457 Type: Dynamic link library Path: %SYSTEMDRIVE%\Users\<username>\OneDrive\Área de Trabalho\Backup - CCE\Windows7\Program Files\suprasavings\2rs3.dll Group: Malware file Last Updated: March 4, 2023
4.	SecureAssist.exe	03e4769e69da12c48253cf0e5fe3b440	748
Name: SecureAssist.exe MD5: 03e4769e69da12c48253cf0e5fe3b440 Size: 1.28 MB (1283616 bytes) Detections: 748 Type: Executable File Path: C:\Pasta REC SSD 20_12_2020\Root\Pastas Recuperadas\PASTA FTICE 09_10_18\Arquivos de programas\suprasavings\SecureAssist.exe Group: Malware file Last Updated: February 26, 2024
5.	krltucdfau.dll	d2d23d23bd6a6a4321fc7b549ed3de42	736
Name: krltucdfau.dll MD5: d2d23d23bd6a6a4321fc7b549ed3de42 Size: 74.75 KB (74752 bytes) Detections: 736 Type: Dynamic link library Path: %PROGRAMFILES%\C6CAB4CF-DAB9-45B9-AE9A-961145402E07 Group: Malware file Last Updated: April 14, 2020
6.	uninstaller.exe.vir	c645680741ed95c660d82fec7692b3e1	191
Name: uninstaller.exe.vir MD5: c645680741ed95c660d82fec7692b3e1 Size: 80.05 KB (80058 bytes) Detections: 191 Path: %SYSTEMDRIVE%\AdwCleaner\Quarantine\C\Program Files\SupraSavings\uninstaller.exe.vir Group: Malware file Last Updated: March 28, 2024
7.	suprasavings_2703-e3e04064.exe	4a59fd9f6f05d13a7b55105ece17daed	118
Name: suprasavings_2703-e3e04064.exe MD5: 4a59fd9f6f05d13a7b55105ece17daed Size: 1.39 MB (1391718 bytes) Detections: 118 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\AppData\Local\Temp\n2425\suprasavings_2703-e3e04064.exe Group: Malware file Last Updated: November 6, 2022
8.	uninstaller.exe	51a91ea9a7b9f0ed5bc7809b04010014	116
Name: uninstaller.exe MD5: 51a91ea9a7b9f0ed5bc7809b04010014 Size: 80.05 KB (80058 bytes) Detections: 116 Type: Executable File Path: C:\backup 02-06-17\Backup-15-09-2015\Backup 05-06-2014\Program Files\suprasavings\uninstaller.exe Group: Malware file Last Updated: June 19, 2022
9.	nsvB5B9.tmp.exe	74c37c26a9fb0a4a76a051b583b1cac4	111
Name: nsvB5B9.tmp.exe MD5: 74c37c26a9fb0a4a76a051b583b1cac4 Size: 80.29 KB (80296 bytes) Detections: 111 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\nsvB5B9.tmp.exe Group: Malware file Last Updated: November 20, 2023
10.	AdKnowledge_suprasavings[1].exe	f505d89a29f7732b0396cadd3def2bc6	70
Name: AdKnowledge_suprasavings[1].exe MD5: f505d89a29f7732b0396cadd3def2bc6 Size: 1.38 MB (1381864 bytes) Detections: 70 Type: Executable File Path: C:\Microcenter Backup\Betsy-RP1405240849\Users\<username>\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FAZH3WXL\AdKnowledge_suprasavings[1].exe Group: Malware file Last Updated: January 13, 2022
11.	2rs3.dll	bb9a12ee2fd0f796bc23f9db41686aa8	27
Name: 2rs3.dll MD5: bb9a12ee2fd0f796bc23f9db41686aa8 Size: 91.1 KB (91104 bytes) Detections: 27 Type: Dynamic link library Path: %PROGRAMFILES%\SupraSavings Group: Malware file Last Updated: June 30, 2014
12.	SecureAssist.exe	cafca6af253de067379d82fea787b8bb	17
Name: SecureAssist.exe MD5: cafca6af253de067379d82fea787b8bb Size: 1.55 MB (1558032 bytes) Detections: 17 Type: Executable File Path: %PROGRAMFILES%\SupraSavings Group: Malware file Last Updated: April 13, 2020
13.	SupraSavingsService64.exe	57f58bbd917716423665dfd6cc9d2281	11
Name: SupraSavingsService64.exe MD5: 57f58bbd917716423665dfd6cc9d2281 Size: 172.54 KB (172544 bytes) Detections: 11 Type: Executable File Path: %PROGRAMFILES(x86)%\C1449738-EC02-42E2-8423-C1CF269EC1D7 Group: Malware file Last Updated: July 11, 2014
14.	uninstaller.exe	4de27e5192af4a26e40a143918e57d53	5
Name: uninstaller.exe MD5: 4de27e5192af4a26e40a143918e57d53 Size: 80.05 KB (80056 bytes) Detections: 5 Type: Executable File Path: %PROGRAMFILES%\suprasavings Group: Malware file Last Updated: December 17, 2019
15.	suprasavings.exe	9deba87b7a60f8251ba02943126452cc	4
Name: suprasavings.exe MD5: 9deba87b7a60f8251ba02943126452cc Size: 1.38 MB (1386333 bytes) Detections: 4 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\WPR\suprasavings.exe Group: Malware file Last Updated: August 20, 2022
16.	suprasavings_4212014.exe	94e384c78f9ba10b04308be34481c56e	3
Name: suprasavings_4212014.exe MD5: 94e384c78f9ba10b04308be34481c56e Size: 1.38 MB (1389244 bytes) Detections: 3 Type: Executable File Path: %TEMP%\nsn469D.tmp\52 Group: Malware file Last Updated: June 30, 2014
17.	SupraSavingsService.exe	385c7d6c4f42b076a186696290824168	3
Name: SupraSavingsService.exe MD5: 385c7d6c4f42b076a186696290824168 Size: 244.2 KB (244202 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES%\5B99CC8D-7BAF-430A-9C63-67C9980E3ED8 Group: Malware file Last Updated: July 11, 2014
18.	installdaddy_suprasavings.exe	4594735e2fbc9fdd6191bc0ace658e73	1
Name: installdaddy_suprasavings.exe MD5: 4594735e2fbc9fdd6191bc0ace658e73 Size: 1.39 MB (1391566 bytes) Detections: 1 Type: Executable File Path: %TEMP%\nswF03A.tmp Group: Malware file Last Updated: June 30, 2014
19.	SecureAssist.exe	de7b8dece784b0eb666449ba140ecd5f	1
Name: SecureAssist.exe MD5: de7b8dece784b0eb666449ba140ecd5f Size: 1.55 MB (1558032 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\SupraSavings Group: Malware file Last Updated: June 30, 2014
20.	SuprasavingsWrapped.exe	308d67e6819108d0d20899378a8a6a47	1
Name: SuprasavingsWrapped.exe MD5: 308d67e6819108d0d20899378a8a6a47 Size: 1.44 MB (1440688 bytes) Detections: 1 Type: Executable File Path: %TEMP%\10d2670116c74ecd83e873ffb71f8a551075 Group: Malware file Last Updated: June 30, 2014

Registry Details

Adware.SupraSavings may create the following registry entry or registry entries:

CLSID

{03EF41A4-BA24-4e49-A2C0-E1D047299287}

{130CCD34-0382-48E5-B307-0E7E72166828}

{26D25DD5-F17A-4d93-9A94-997E2124EEB4}

{30279F40-D76B-443c-A34D-F43B35B35CE1}

{76A60138-58B3-4e27-85FB-8FEF344A8998}

{796D0AA0-DC0E-44C9-A398-C874F04D55A4}

{9863E762-BACC-46E4-8CAA-2A6ADA06B65B}

{CE2102F0-DF63-452e-9CA7-0F75FF4DDD4B}

{DADFCC6F-66D2-4e1d-A01B-7064CAD2F583}

{EBE666C3-F26C-4cf6-8ABA-3D5F5D2625E1}

HKEY..\..\..\..{RegistryKeys}

SOFTWARE\0866B8A9-2E46-422F-947B-2C563F566A0E

Software\AppDataLow\Software\Supra Savings

Software\AppDataLow\Software\suprasavings

SOFTWARE\Classes\AppID\SecureAssist.exe

SOFTWARE\Classes\SecureAssist.DataContainer

SOFTWARE\Classes\SecureAssist.DataContainer.1

SOFTWARE\Classes\SecureAssist.DataController

SOFTWARE\Classes\SecureAssist.DataController.1

SOFTWARE\Classes\SecureAssist.DataTable

SOFTWARE\Classes\SecureAssist.DataTable.1

SOFTWARE\Classes\SecureAssist.DataTableFields

SOFTWARE\Classes\SecureAssist.DataTableFields.1

SOFTWARE\Classes\SecureAssist.DataTableHolder

SOFTWARE\Classes\SecureAssist.DataTableHolder.1

SOFTWARE\Classes\SecureAssist.LSPLogic

SOFTWARE\Classes\SecureAssist.LSPLogic.1

SOFTWARE\Classes\SecureAssist.ReadOnlyManager

SOFTWARE\Classes\SecureAssist.ReadOnlyManager.1

SOFTWARE\Classes\SecureAssist.WatchDog

SOFTWARE\Classes\SecureAssist.WatchDog.1

SOFTWARE\Classes\SecureAssist.WFPController

SOFTWARE\Classes\SecureAssist.WFPController.1

SOFTWARE\F978377C-B7D4-4536-8E10-14CA97B13394

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9dbbe4f9-6e7b-b8b7-9283-368de8576190}

SOFTWARE\Supra Savings

SOFTWARE\SupraSavings

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{9dbbe4f9-6e7b-b8b7-9283-368de8576190}

SOFTWARE\Wow6432Node\SupraSavings

SOFTWARE\Wow6432Node\Wow6432Node\SupraSavings

SYSTEM\ControlSet001\services\buuoujqmrk64

SYSTEM\ControlSet001\services\SecureAssist

SYSTEM\ControlSet001\Services\SupraSavingsService

SYSTEM\ControlSet001\Services\SupraSavingsService64

SYSTEM\ControlSet002\Control\SafeBoot\Network\SecureAssist

SYSTEM\ControlSet002\services\buuoujqmrk64

SYSTEM\ControlSet002\services\SecureAssist

SYSTEM\ControlSet002\Services\SupraSavingsService

SYSTEM\ControlSet002\Services\SupraSavingsService64

SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SecureAssist

SYSTEM\CurrentControlSet\services\buuoujqmrk64

SYSTEM\CurrentControlSet\services\SecureAssist

SYSTEM\CurrentControlSet\Services\SupraSavingsService

SYSTEM\CurrentControlSet\Services\SupraSavingsService64

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

Supra Savings

suprasavings

{D12C40DB-CD7D-4D86-9285-5E2FE23693E4}

{E6B105B8-1F65-4428-9397-1DFD8A03B94D}

Directories

Adware.SupraSavings may create the following directory or directories:

%PROGRAMFILES%\0866B8A9-2E46-422F-947B-2C563F566A0E

%PROGRAMFILES%\19A6D51C-2D35-44DB-B412-0B01BF8D2D62

%PROGRAMFILES%\5B99CC8D-7BAF-430A-9C63-67C9980E3ED8

%PROGRAMFILES%\6E6B36EB-9156-411B-B951-C735F4747DCF

%PROGRAMFILES%\74B569D3-F7FC-4C64-ABA2-63D320FCA1C5

%PROGRAMFILES%\CB78F643-3729-434F-8C25-F28D15F025F3

%PROGRAMFILES%\CB7F8E3E-62F8-4E72-BE96-1520352D6391

%PROGRAMFILES%\F978377C-B7D4-4536-8E10-14CA97B13394

%PROGRAMFILES%\suprasavings

%PROGRAMFILES(X86)%\SupraSavings

%PROGRAMFILES(x86)%\0866B8A9-2E46-422F-947B-2C563F566A0E

%PROGRAMFILES(x86)%\19A6D51C-2D35-44DB-B412-0B01BF8D2D62

%PROGRAMFILES(x86)%\5B99CC8D-7BAF-430A-9C63-67C9980E3ED8

%PROGRAMFILES(x86)%\6E6B36EB-9156-411B-B951-C735F4747DCF

%PROGRAMFILES(x86)%\74B569D3-F7FC-4C64-ABA2-63D320FCA1C5

%PROGRAMFILES(x86)%\BEDAACA9-0245-4A85-A697-BD5CD3AD04D1

%PROGRAMFILES(x86)%\CB78F643-3729-434F-8C25-F28D15F025F3

%PROGRAMFILES(x86)%\CB7F8E3E-62F8-4E72-BE96-1520352D6391

%PROGRAMFILES(x86)%\F978377C-B7D4-4536-8E10-14CA97B13394

Ranking:	6,727
Threat Level:	20 % (Normal)
Infected Computers:	25,957

First Seen:	April 3, 2014
Last Seen:	March 28, 2024
OS(es) Affected:	Windows

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Adware.SupraSavings

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Adware.SupraSavings

File System Details

Registry Details

Directories

Submit Comment

Trending

Jegdex Scam

Cyberattack Causes Nationwide Outage for Change...

Whatsex.es

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?