Threat Database Adware InstantSavingsApp

InstantSavingsApp

By Domesticus in Adware

Threat Scorecard

Popularity Rank: 22,483
Threat Level: 20 % (Normal)
Infected Computers: 1,960
First Seen: February 26, 2013
Last Seen: December 7, 2025
OS(es) Affected: Windows

ScreenshotInstant Savings App is adware that may show a pop-up box carrying pop-up advertisements when installed on the PC. Commonly, pop-up advertisement boxes shown by InstantSavingsApp may offer discounts coupons, sales, deals or savings for specific items that computer users may be interested in. InstantSavingsApp may be able to control browsing routine of the computer user, visited websites and terms or phrases that the PC user is looking for on the Internet. By using this information, Instant Savings App may then illustrate related pop-up advertisements and banners once the PC user is browsing online shops. Instant Savings App may emerge as an affiliated application with free programs that PC users may download from the Internet. Therefore, installing freeware may also load Instant Savings App even without the computer owner's authorization.

SpyHunter Detects & Remove InstantSavingsApp

File System Details

InstantSavingsApp may create the following file(s):
# File Name MD5 Detections
1. repair.js d65af8a6e83f1e34df4b2546d7b61fcb 783
2. KangoEngine.exe 468fb48bed34208a55c73dd3c6d73874 12
3. Instant Savings App-bho64.dll 5707c7940c6e20940b28d7c4ee3b5436 2
4. Instant Savings App-bho.dll cf7dad2203457e5533763218877da661 1
5. FrameworkBHO64.dll 427799514ea163e613a2d5872040c406 1
6. FrameworkEngine.exe 163e4fb17e03acf25c3746d0e45d8ce2 1
7. FrameworkBHO.dll e6e4039d6fde2c4acea33e6e7c189c13 1
More files

Registry Details

InstantSavingsApp may create the following registry entry or registry entries:
CLSID
{15BE519B-2D82-431B-8747-26F9877D1116}
{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
{6EE7A41D-6050-4DCF-8498-4C70E84BEAE8}
{77AD9A6E-DB8C-4550-BEBF-146FFDD7820A}
{D620FD57-1C61-407F-B689-D072B7A439AF}
{D629FDE2-1C75-40B2-9B20-CE72D3A430AF}
SOFTWARE\Classes\CrossriderApp0004351.BHO
SOFTWARE\Classes\CrossriderApp0004351.BHO.1
SOFTWARE\Classes\CrossriderApp0004351.Sandbox
SOFTWARE\Classes\CrossriderApp0004351.Sandbox.1
SOFTWARE\Instant Savings App
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110011431151}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5DF1907E-15A0-44C8-918A-F9C0DE745BB0}
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Instant Savings App-bg.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
SOFTWARE\Wow6432Node\Instant Savings App
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5DF1907E-15A0-44C8-918A-F9C0DE745BB0}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Instant Savings App-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}

Directories

InstantSavingsApp may create the following directory or directories:

%LOCALAPPDATA%\Instant Savings App
%LOCALAPPDATA%\Updater4351
%PROGRAMFILES%\Instant Savings App
%PROGRAMFILES(x86)%\Instant Savings App
%USERPROFILE%\AppData\LocalLow\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
%appdata%\Microsoft\Windows\Start Menu\Programs\Instant Savings App

URLs

InstantSavingsApp may call the following URLs:

Instant Savings App

Trending

Most Viewed

Loading...