Threat Database Adware Savings Hero

Savings Hero

By Domesticus in Adware

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 5,207
First Seen: August 1, 2013
Last Seen: November 4, 2023
OS(es) Affected: Windows

Savings Hero is web browser extenion, which is categorized as an adware program. Savings Hero is usually downloaded together with other free software products from the Internet. Savings Hero often comes bundled with shareware and freeware programs; so if a computer user likes to download TV shows, music, freebie games and similar stuff, then he/she can also download Savings Hero. While bein installed, Savings Hero displays annoying pop-up advertising windows, ad banners or pop under windows, which run behind the website the target PC user is viewing. Savings Hero can also divert the hacked web browser to topsearchresults.org. Savings Hero spies on victimized PC users by gathering search queries and then showing relevant advertisements.

SpyHunter Detects & Remove Savings Hero

File System Details

Savings Hero may create the following file(s):
# File Name MD5 Detections
1. repair.js 7b2b96f975ceaa01973403a13a5fa4f9 4,515
2. FrameworkBHO64.dll 433269e6462aabbcfc1957f99ee168f5 24
3. FrameworkBHO.dll 76de7de6d4073dd6d082bec4dccc1e53 16
4. FrameworkBHO.dll 725ad8f28361f6ed35fd5ca21c8103e4 13
5. FrameworkBHO64.dll 3d54eff2aa13126bdb2fd5d95fa6adf4 13
6. FrameworkBHO64.dll e8dc30a160fcf40c008a413e7280fb9a 11
7. FrameworkBHO64.dll 51159d655e32d0ea783351a34f320591 8
8. FrameworkBHO.dll e770432b3a8a51cd5bc28c59eeeb4442 8
9. FrameworkBHO.dll 41cce1f9e911add5bde3ef34b8c4a9de 8
10. FrameworkBHO.dll f32036e4975f417e2e8637253a9e464d 8
11. FrameworkBHO64.dll 3e30d3e264397dbe28194b27482c3324 7
12. FrameworkBHO.dll b811bc252702d462bfd8e5cbfd16f325 7
13. FrameworkBHO.dll e88c1aec787bbeac84238dfa49c89488 7
14. FrameworkBHO64.dll 7b5ecb7d858a9ba8690cd6075daed3d9 7
15. repair.js 214b241da26896ab3901203219b71de8 6
16. FrameworkBHO64.dll 27900981c741e761c64d94bc28b3d226 6
17. FrameworkBHO.dll 22b24095c299785d50c437eea854c53f 5
18. FrameworkBHO64.dll b51f4fea317cec452c6ed2d00b5544b1 5
19. FrameworkBHO.dll de9bfc3d0000c93a01f069f486c0562d 4
20. FrameworkBHO64.dll 68db9302d6face87a3376c06fb1eab03 4
21. FrameworkEngine.exe fb7e522166123d48a5ddd7ae9c724f46 4
22. FrameworkBHO64.dll 47250e1039f89349759a0ecc8622f126 4
23. FrameworkBHO64.dll 27d580b012e53b7ecc0c7bcd3947109c 4
24. FrameworkBHO64.dll e8a63edbe3a70dafa293d256abbb2d75 4
25. FrameworkBHO.dll 3aa3418ec2393c591c206c895f1b52bf 4
26. FrameworkBHO.dll b16f109c23902e4b5b967162045927c2 4
27. FrameworkBHO64.dll dec8cc5f800dcc303c7e37c49b3f390b 3
More files

Registry Details

Savings Hero may create the following registry entry or registry entries:
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110211991107}
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Savings Hero-bg.exe

Directories

Savings Hero may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\databases\chrome-extension_eadkaencnfblndmbcfmiibbagnoohfpm_0
%LOCALAPPDATA%\Updater29907
%PROGRAMFILES%\Savings Hero
%PROGRAMFILES(x86)%\Savings Hero

Related Posts

Trending

Most Viewed

Loading...