Threat Database Adware InstantSavingsApp

InstantSavingsApp

By Domesticus in Adware

Threat Scorecard

Ranking: 14,393
Threat Level: 20 % (Normal)
Infected Computers: 1,947
First Seen: February 26, 2013
Last Seen: September 7, 2023
OS(es) Affected: Windows

ScreenshotInstant Savings App is adware that may show a pop-up box carrying pop-up advertisements when installed on the PC. Commonly, pop-up advertisement boxes shown by InstantSavingsApp may offer discounts coupons, sales, deals or savings for specific items that computer users may be interested in. InstantSavingsApp may be able to control browsing routine of the computer user, visited websites and terms or phrases that the PC user is looking for on the Internet. By using this information, Instant Savings App may then illustrate related pop-up advertisements and banners once the PC user is browsing online shops. Instant Savings App may emerge as an affiliated application with free programs that PC users may download from the Internet. Therefore, installing freeware may also load Instant Savings App even without the computer owner's authorization.

SpyHunter Detects & Remove InstantSavingsApp

File System Details

InstantSavingsApp may create the following file(s):
# File Name MD5 Detections
1. FrameworkBHO.dll 08b242b1d1f5fc6421f937c389701b62 9
2. FrameworkBHO.dll 98645330d188436dff59cda1aab3dcd7 7
3. FrameworkBHO64.dll 3ddf6568b4674a1177931c86fb8fdad7 6
4. FrameworkBHO.dll f6ba10ffa9d6dc75b641f42fe31e4bc1 4
5. FrameworkBHO64.dll 2a61ff5bdd6eb1978c2533b33f315aca 3
6. FrameworkBHO64.dll 369ba28ce47d5cc789161425568c811c 3
7. FrameworkBHO.dll 452c2c9c649a9ccc1cf88092765c7827 2
8. Instant Savings App-bho64.dll 5707c7940c6e20940b28d7c4ee3b5436 2
9. FrameworkBHO64.dll a7fb3aedcdceae1729fbb6e0523872a9 2
10. FrameworkBHO.dll e391e13fad3cd21144d966e7c578ca9c 1
11. FrameworkBHO.dll e4fb1c9eac26b93746204e3fe479554f 1
12. FrameworkBHO64.dll dfbfd7985f8c587637c47d3b2e82a039 1
13. FrameworkEngine.exe ac62a8c8eb01289ac5c0e70db089ccb2 1
14. FrameworkBHO.dll 767ff871569484f93a289eeca029bf40 1
15. FrameworkEngine.exe 8fe30b5d349b6922b4ac2ec04c89c2bd 1
16. FrameworkBHO64.dll 39e2eb2e21f65eebe16bc969ea4eca04 1
17. FrameworkBHO64.dll 56e27f3c485ea46ddec3bff6f6ca40f0 1
18. FrameworkBHO.dll 5feea0be5508b6a4e899529c9331c3e5 1
19. FrameworkBHO64.dll cdc55ca36fa5c50635dff5fa448d6e9e 1
20. FrameworkBHO.dll 2a00e4d6e6cf2f911f7297dd44d43539 1
21. FrameworkBHO.dll e625160c988958029de2571f3b64c5e0 1
22. FrameworkEngine.exe 64489f443f2b6695b6a0e368923f662b 1
23. FrameworkBHO64.dll 8a246342277503ef9fa7ede6b0d2ced6 1
24. FrameworkBHO.dll d3da9a56f6e61012a5c052a7da9bf8ce 1
25. FrameworkBHO64.dll 427799514ea163e613a2d5872040c406 1
26. FrameworkEngine.exe 163e4fb17e03acf25c3746d0e45d8ce2 1
27. FrameworkBHO.dll e6e4039d6fde2c4acea33e6e7c189c13 1
More files

Registry Details

InstantSavingsApp may create the following registry entry or registry entries:
CLSID
{15BE519B-2D82-431B-8747-26F9877D1116}
{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
{6EE7A41D-6050-4DCF-8498-4C70E84BEAE8}
{77AD9A6E-DB8C-4550-BEBF-146FFDD7820A}
{D620FD57-1C61-407F-B689-D072B7A439AF}
{D629FDE2-1C75-40B2-9B20-CE72D3A430AF}
SOFTWARE\Classes\CrossriderApp0004351.BHO
SOFTWARE\Classes\CrossriderApp0004351.BHO.1
SOFTWARE\Classes\CrossriderApp0004351.Sandbox
SOFTWARE\Classes\CrossriderApp0004351.Sandbox.1
SOFTWARE\Instant Savings App
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110011431151}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5DF1907E-15A0-44C8-918A-F9C0DE745BB0}
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Instant Savings App-bg.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
SOFTWARE\Wow6432Node\Instant Savings App
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5DF1907E-15A0-44C8-918A-F9C0DE745BB0}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Instant Savings App-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}

Directories

InstantSavingsApp may create the following directory or directories:

%LOCALAPPDATA%\Instant Savings App
%LOCALAPPDATA%\Updater4351
%PROGRAMFILES%\Instant Savings App
%PROGRAMFILES(x86)%\Instant Savings App
%USERPROFILE%\AppData\LocalLow\{6EB4A4C0-6036-4D2E-B010-20707C4B62E8}
%appdata%\Microsoft\Windows\Start Menu\Programs\Instant Savings App

URLs

InstantSavingsApp may call the following URLs:

Instant Savings App

Trending

Most Viewed

Loading...