Threat Database Adware SavingsShip

SavingsShip

By Sumo3000 in Adware

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 88
First Seen: September 23, 2013
Last Seen: May 14, 2022
OS(es) Affected: Windows

Websites and browser extensions promising computer users better shopping deals have skyrocketed in popularity, especially in recent years thanks to the rising popularity of online shopping. SavingsShip is an online service that has become a popular way of finding the best prices when shopping online. In fact, there are many useful aspects of SavingsShip: this online service offers computer users coupons, discounts and unique deals. However, there is one aspect where the people administrating SavingsShip have definitely gone wrong. Web browser add-ons associated with SavingsShip are often bundled along with freeware programs, included in the installation procedure in an attempt to install SavingsShip. This means that SavingsShip's services are overshadowed by these types of covered tactics that are commonly associated with other threats. Many computer users have complained of browser hijackers associated with SavingsShip that make unwanted changes to their Web browser's settings and cause a variety of symptoms on affected Web browsers. If you have problems associated with SavingsShip, ESG security researchers strongly recommend the use of a strong anti-malware application to protect your computer and remove SavingsShip's associated Web browser extensions and similar components immediately.

SavingsShip is Associated with Adware and Browser Hijackers

One of the first signs that components associated with SavingsShip have been installed on your computer is the unauthorized alteration of your Web browser's homepage and default search engine to SavingsShip's website. Computer users have also complained that their Web browser forces them to visit SavingsShip repeatedly, often after clicking on unrelated links or attempting to visit other websites. Apart from these symptoms, redirects and advertisements associated with SavingsShip may expose your computer to more unsafe online content. However, the SavingsShip add-on itself is not considered unsafe but categorized as a PUP or Potentially Unwanted Program.

SavingsShip's developer is 215Apps. You can remove this developer's software from your computer easily from 'Add and Remove' Programs in your Windows Control Panel. Usually, you may not need a specialized removal tool to stop symptoms associated with SavingsShip. However, once the Web browser toolbar has been removed, ESG security analysts recommend that computer users run a full scan of the computer with a strong anti-malware utility to ensure that it has not been exposed to more threats.

SpyHunter Detects & Remove SavingsShip

File System Details

SavingsShip may create the following file(s):
# File Name MD5 Detections
1. SavingsShip.exe 9cf75b145e61feab046cafac67ae84ec 2
2. Savings Ship-buttonutil64.exe 8cdee6c47e421fc7462da676720b96d4 0
3. Savings Ship-codedownloader.exe 938d94528b101aeea57551b8558d8cf4 0
4. Savings Ship-helper.exe 74df696bd93fde84327543aea473d696 0
5. Uninstall.exe 0bc5356cc01630cde1c37cdd3a585678 0
6. Savings Ship-bho.dll 9461ee21d277a0daeceb52234b77092f 0
7. Savings Ship-bho64.dll b02b6235dc421014bd6f275998eba6dc 0
8. Savings Ship-buttonutil.exe 5141d92a2f05eddab45b57df2ae758b1 0
9. Savings Ship-bg.exe a2844996625c850d8202974021d83dbf 0
10. Updater28430.exe 58710bd8b47eea45dbfecbec2eb9a7ea 0

Registry Details

SavingsShip may create the following registry entry or registry entries:
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Savings Ship-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211841130}
SOFTWARE\Wow6432Node\Savings Ship

Directories

SavingsShip may create the following directory or directories:

%LOCALAPPDATA%\Updater28430
%ProgramFiles%\Savings Ship
%ProgramFiles(x86)%\Savings Ship

Trending

Most Viewed

Loading...