Threat Database Adware Savings Avenger

Savings Avenger

By GoldSparrow in Adware

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 1,356
First Seen: March 31, 2014
Last Seen: May 24, 2023
OS(es) Affected: Windows

Savings Avenger is adware which, upon installation on the PC, may embed a related browser extension, plug-in or add-on. Savings Avenger may stealthily enter and install itself on the PC without the computer user's permission, or it may be added as an additional application to freeware. Savings Avenger may modify the default system and Web browser settings that may later cause various system issues. Savings Avenger may be distributed and integrate itself into the computer through packaged free programs. PC users may download the free program they need from numerous suspicious download websites that may insert Savings Avenger with its toolbar into the package of software installation. Savings Avenger maydisplay random pop-up ads that may include sponsored links to numerous unreliable websites that provide PC users with a variety of deals, sales, discount coupons and other offers for online products and services.

SpyHunter Detects & Remove Savings Avenger

File System Details

Savings Avenger may create the following file(s):
# File Name MD5 Detections
1. FrameworkBHO.dll 060c887c6ffa05f44f9ea10c07dffe25 244
2. FrameworkBHO64.dll 498077651a879eaa6a32db7444de8fd4 177
3. FrameworkBHO64.dll 5fe4865034681d8412512a243d49ace5 165
4. FrameworkEngine.exe 46ce93e2047f56e3b93e3b5d4dd68a3c 88
5. FrameworkBHO.dll 016ba47da9ed0c3048f0e1ddcbbbf1b3 75
6. FrameworkBHO.dll 637721d342e0d5d11bfca46aea565b76 48
7. FrameworkEngine.exe c1d1ef4d857912de3338cb58c4e1ef3e 37
8. FrameworkBHO64.dll 8a002b65c729949cd29c1e48d3cd2f54 30
9. FrameworkBHO64.dll c1c943a4d319ac7507d58ba50f66d833 28
10. FrameworkEngine.exe 97e8ac363ca21c5c88eb88871d5ecd16 23
11. FrameworkBHO.dll cf2d5a683b9b4ae2bc3ae4cea5c9a977 18
12. FrameworkEngine.exe d2d1633f96d93abda8c4a083a69c3dd8 16
13. FrameworkBHO64.dll 88c7d95b2ff3c17ab7683d52c95b39b0 15
14. FrameworkEngine.exe 4f68a1ba5e3fb973ec59b9b9a19b83c7 11
15. FrameworkBHO.dll 8036d53009c42b71a34303d7e304eacf 3
16. Savings Avenger.exe d25b92ed2d9471ae96d40f7c9524cf3b 0

Registry Details

Savings Avenger may create the following registry entry or registry entries:
CLSID
{1720E857-8861-4F7F-B689-D0D9B79939AF}
{1775E8E2-8893-4F03-9392-44D97B991BAF}
{5D56C96E-DD47-462A-8192-7019F6E193A3}
{5DE7C91D-DD50-46CF-8498-4C19E8E1EAA3}
{9FF0F3E0-E593-4BFD-84E2-805C0491F1F9}
{B484D3EA-4A2A-4F8E-B591-57E5FBE67DAB}
{C06683F0-BFB7-42B3-BD85-4D66F8D42707}
{C0AD836E-BF8C-4250-BEBF-1466FDD48207}
SOFTWARE\38957
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9FF0F3E0-E593-4BFD-84E2-805C0491F1F9}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5D56C96E-DD47-462A-8192-7019F6E193A3}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5D56C96E-DD47-462A-8192-7019F6E193A3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{5D56C96E-DD47-462A-8192-7019F6E193A3}
SOFTWARE\Savings Avenger
SOFTWARE\Wow6432Node\38957
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9FF0F3E0-E593-4BFD-84E2-805C0491F1F9}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{5D56C96E-DD47-462A-8192-7019F6E193A3}
SOFTWARE\Wow6432Node\Savings Avenger

Directories

Savings Avenger may create the following directory or directories:

%LOCALAPPDATA%\Savings Avenger
%PROGRAMFILES%\Savings Avenger
%PROGRAMFILES(x86)%\Savings Avenger

Trending

Most Viewed

Loading...