Spring Smart

Spring Smart Description

Spring Smart is a PUP (Potentially Unwanted Program) infection that offers victims deals and coupons for popular online retailers. Generally, Spring Smart is designed to display pop-up advertisements on affected computers. Spring Smart is often associated with browser toolbars and other types of undesirable content that is often installed on the victim's browser.

Although not a Threat, Spring Smart May Be Very Invasive


In general, Spring Smart is not considered threatening. In fact, Spring Smart is not as risky as other types of threats, but it's important to remember that Spring Smart does have many characteristics that are often associated with other threats and that may cause problems on the affected browser. Spring Smart may take over your browser, hijacking it and controlling the type of content you view on the affected browser. Spring Smart also interferes with the victim's experience, interrupting it constantly with irritating advertisements and marketing content. In general, these types of programs are known by malware researchers as PUPs, or Potentially Unwanted Programs. The main objective of Spring Smart is to generate revenue at the expense of the victim. The people controlling Spring Smart make money by generating Web traffic for their low quality websites and displaying advertisements and sponsored marketing links on affected browsers.

A Careful Installation of New Software May Avoid Several Problems


Spring Smart may enter a PC when a victim installs a freeware program from a low quality source. Free programs typically associated with Spring Smart infections include media players, PDF creators and download managers. These are often bundled with PUPs such as Spring Smart. In many cases, free software may be bundled with a specific installer designed to install a PUP along with the free program. For this reason, malware researchers strongly recommend being careful when installing any new software. Using custom installation to monitor every single component being installed is usually a good idea. It is then a matter of preventing the installation of any content not directly associated with the freeware being installed. Content associated with Spring Smart infections usually takes the form of browser toolbars, add-ons or extensions. If Spring Smart has already been installed on the computer, Spring Smart should be uninstalled at once. After Spring Smart is removed, malware analysts recommend that victims undo any unwanted changes made to the affected computer's system settings and run a full scan of the affected PC with the help of a strong anti-malware program.

Infected with Spring Smart? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Spring Smart

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Spring Smart outbreaks and other threats from global to local level.

File System Details

Spring Smart creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES(x86)%\Spring Smart\updateSpringSmart.exe 206,632 929e17a186b4e6a41e0bcb8e1b4d84ba 536
2 %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\fgeapihpgbepllencafcpkfbjlkogfan 206
3 %PROGRAMFILES%\Spring Smart 203
4 %PROGRAMFILES(x86)%\Spring Smart 200
5 chrome-extension_fgeapihpgbepllencafcpkfbjlkogfan_0.localstorage 197
6 chrome-extension_fgeapihpgbepllencafcpkfbjlkogfan_0.localstorage-journal 194
7 firefox@springsmart.net.xpi 191
8 %PROGRAMFILES%\Spring Smart\SpringSmartbho.dll 249,640 481685d1947a874061d0972c60e4fe21 19

Registry Details

Spring Smart creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Google\Chrome\Extensions\fgeapihpgbepllencafcpkfbjlkogfan
SOFTWARE\Microsoft\Tracing\updateSpringSmart_RASAPI32
SOFTWARE\Microsoft\Tracing\updateSpringSmart_RASMANCS
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{7f232128-6f42-4f37-8efe-2e6020b2d478}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F232128-6F42-4F37-8EFE-2E6020B2D478}
Software\Spring Smart
SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fgeapihpgbepllencafcpkfbjlkogfan
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateSpringSmart_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateSpringSmart_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{7f232128-6f42-4f37-8efe-2e6020b2d478}
SOFTWARE\Wow6432Node\Spring Smart
SYSTEM\CurrentControlSet\services\Update Spring Smart
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
Spring Smart
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{CAC25769-C204-4C2C-B914-2E2AF7544033}
{92656265-FD9A-4040-9F88-5F708886EA15}
{7f232128-6f42-4f37-8efe-2e6020b2d478}

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 12 + 9 ?