Threat Database Adware SmartSaver

SmartSaver

By GoldSparrow in Adware

Threat Scorecard

Ranking: 6,487
Threat Level: 20 % (Normal)
Infected Computers: 8,435
First Seen: March 27, 2014
Last Seen: September 17, 2023
OS(es) Affected: Windows

SmartSaver is a browser plug-in that may declare to help computer users save time and money when performing online shopping. SmartSaver is considered to be adware or a PUP (potentially unwanted program). In actuality, the browser extension of SmartSaver is not a helpful tool. SmartSaver may create and show disturbing pop-up advertisements with the text 'Ads not by this site' that may contain discount coupons, sponsored links, shopping comparison, deals, banners, content suggestions, pop-ups and pop-under advertisements. If the PC user clicks on advertisements delivered by SmartSaver, he may unknowingly enable adware authors generate advertising revenue from these clicks. The add-on of SmartSaver may also trace the PC user's Web browsing by recording the websites read, movement from one website to another, the computer user's online queries, Internet Protocol address, Web browser information, and application numbers, cookies, geographical location, referring page, time, date and other details.

Aliases

14 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG Generic_r.PD
Fortinet Riskware/Toolbar_CrossRider
Antiy-AVL Trojan/Win32.TSGeneric
McAfee-GW-Edition Artemis!D2955DDDB419
AntiVir Adware/CrossRider.A.5162
Comodo ApplicUnwnt
Sophos Generic PUA PP
Avast Win32:Adware-gen [Adw]
McAfee RDN/Generic PUP.x!chn
Antiy-AVL Trojan/Win32.SGeneric
DrWeb Trojan.Crossrider.7519
Symantec Adware.Crossid
Symantec WS.Reputation.1
McAfee Artemis!ABCCB4A7B797

SpyHunter Detects & Remove SmartSaver

File System Details

SmartSaver may create the following file(s):
# File Name MD5 Detections
1. dc5dc299-20b8-48be-897b-b9b0d40020e0-2.exe 7816d58f878fa2fcfa7fcf27a3ae217b 24
2. SmartSaver+ 21-bho64.dll e1df659a98e05c59222ac061bf6dcf31 10
3. SmartSaver+ 8-bho64.dll 7dfe5b67525c886218cd86a4080d4b34 9
4. c781eede-6853-4022-8b26-fb0e7ea06508-2.exe ff2b64017d53ac3a831dd196a569a383 6
5. 3efcc223-357a-4f98-af5d-d081ffbd83e8-2.exe 49309203420c6ec0e3de214b24c6388b 6
6. Uninstall.exe e6f91e9fe086713503bc8c54b4db5526 5
7. smartsaver+ 21-bg.exe 2eb1a1b65fc6ad43a72dc5596053ae44 5
8. c9be3240-f799-4a90-98b0-20142cc7a3e8-2.exe bfda5b2853201a67b13f0b99827686a3 5
9. Smart - 23-codedownloader.exe c9c5aedc782a085d8caa2dbb8fb7c0ce 4
10. be1228f3-e8ce-4089-ba3d-44efdfc4632c-2.exe fef56af2b0b50d6e3b388e5e8d689a73 4
11. be1228f3-e8ce-4089-ba3d-44efdfc4632c-3.exe 64a653b821ea2833867ed47a6ed2beb3 4
12. be1228f3-e8ce-4089-ba3d-44efdfc4632c-5.exe 792c70b80118da4514b5fc3d48788c87 4
13. Smart - 23-nova.exe 0722783bd3444e6a385f943ca311cab7 4
14. smart - 23-bg.exe fbd69051538b56d10b298872ff8463ba 3
15. SmartSaver+ 10-bho.dll 29bc6f5095ab4df07b6e2d2a739a4b94 2
16. Uninstall.exe 3f5bfc148a64af9957defea6443cbd13 2
17. Uninstall.exe d82964124ed3f240a0c185b67a945545 2
18. Smart - 23-bho64.dll ec66e0d8ac126317b444d9f1b11d3edc 2
19. 72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-3.exe 8235b0cfddc210801c1fb1933dd3abf0 1
20. 72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-4.exe c1d2e686d5c6661bbf141be0e32fe0e2 1
21. d6e856ae-9cea-4f89-8d2a-f0a06d59708e-5.exe f309681733512febc86774baa34cbf1e 1
22. d6e856ae-9cea-4f89-8d2a-f0a06d59708e-4.exe f2fbdaf3460c04b90d26304a876c858d 1
23. d6e856ae-9cea-4f89-8d2a-f0a06d59708e-3.exe dcfd485b4da0b1916695cdb5509a8fc8 1
24. d6e856ae-9cea-4f89-8d2a-f0a06d59708e-2.exe e1dd92bfb31909b7767ac7415b288234 1
25. SmartSaver+ 21-codedownloader.exe b8e2b1b9d160b976c3c350636ec7d781 1
26. Smart - 23-bho.dll ec29208371eb8b3e4c9e567f65ad4f6b 1
More files

Registry Details

SmartSaver may create the following registry entry or registry entries:
CLSID
{11111111-1111-1111-1111-110411891124}
{11111111-1111-1111-1111-110411891126}
{22222222-2222-2222-2222-220422892226}
{44444444-4444-4444-4444-440444894424}
{44444444-4444-4444-4444-440444894426}
{55555555-5555-5555-5555-550455895524}
{55555555-5555-5555-5555-550455895526}
{66666666-6666-6666-6666-660466896624}
{66666666-6666-6666-6666-660466896626}
Software\AppDataLow\Software\Sm23mS
Software\AppDataLow\Software\Sm8mS
Software\AppDataLow\Software\SmartSaver+ 12.2
Software\AppDataLow\Software\SS21
Software\AppDataLow\Software\ss8
SOFTWARE\Classes\4a10fb40f32a013158ab33422def983b0061804.BHO
SOFTWARE\Classes\4a10fb40f32a013158ab33422def983b0061804.BHO.1
SOFTWARE\Classes\4a10fb40f32a013158ab33422def983b0061804.Sandbox
SOFTWARE\Classes\4a10fb40f32a013158ab33422def983b0061804.Sandbox.1
SOFTWARE\Classes\CrossriderApp0048924.BHO
SOFTWARE\Classes\CrossriderApp0048924.BHO.1
SOFTWARE\Classes\CrossriderApp0048924.Sandbox
SOFTWARE\Classes\CrossriderApp0048924.Sandbox.1
SOFTWARE\Classes\CrossriderApp0048926.BHO
SOFTWARE\Classes\CrossriderApp0048926.BHO.1
SOFTWARE\Classes\CrossriderApp0048926.Sandbox
SOFTWARE\Classes\CrossriderApp0048926.Sandbox.1
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\SmartSaver+ 12.2
Software\InstalledBrowserExtensions\26549
Software\InstalledBrowserExtensions\smart-saverplus
Software\InstalledBrowserExtensions\smarts\63107
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411891126}
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Sm23mS-bg.exe
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\SmartSaver+ 12.2-bg.exe
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\SmartSaver+ 21-bg.exe
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\ss8-bg.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411891124}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411891124}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411891124}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411891124}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411891126}
SOFTWARE\Sm23mS
SOFTWARE\ss8
SOFTWARE\Wow6432Node\InstalledBrowserExtensions\26549
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Sm23mS-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\SmartSaver+ 12.2-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\SmartSaver+ 21-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\ss8-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411891126}
SOFTWARE\Wow6432Node\Sm23mS
SOFTWARE\Wow6432Node\Sm8mS
SOFTWARE\Wow6432Node\ss8

Directories

SmartSaver may create the following directory or directories:

%PROGRAMFILES%\S10
%PROGRAMFILES%\Sm23mS
%PROGRAMFILES%\Sm8mS
%PROGRAMFILES%\Smart - 23
%PROGRAMFILES%\SmartSaver+ 12
%PROGRAMFILES%\SmartSaver+ 15
%PROGRAMFILES%\SmartSaver+ 21
%PROGRAMFILES%\SmartSaver+ 3
%PROGRAMFILES%\SmartSaver+ 8
%PROGRAMFILES%\ss8
%PROGRAMFILES(X86)%\S10
%PROGRAMFILES(X86)%\SS21
%PROGRAMFILES(X86)%\Sm23mS
%PROGRAMFILES(X86)%\Sm8mS
%PROGRAMFILES(X86)%\SmartSaver+ 12
%PROGRAMFILES(X86)%\SmartSaver+ 15
%PROGRAMFILES(X86)%\SmartSaver+ 3
%PROGRAMFILES(X86)%\SmartSaver+ 8
%PROGRAMFILES(x86)%\Smart - 23
%PROGRAMFILES(x86)%\SmartSaver+ 21
%PROGRAMFILES(x86)%\SmartSaver+ 23
%PROGRAMFILES(x86)%\ss8

URLs

SmartSaver may call the following URLs:

SmartSaver+

Trending

Most Viewed

Loading...