Threat Database Adware Savings Vault

Savings Vault

By LoneStar in Adware

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 153
First Seen: February 22, 2013
Last Seen: October 26, 2022
OS(es) Affected: Windows

Savings Vault is an adware application that provides PC users with an access to a variety of websites that offer discounts for different products. Savings Vault is not a security infection itself but rather an application that can be installed on the compromised Internet browser without a victim's authorization. Savings Vault is often downloaded by PC users as bundled to other software products. While Savings Vault is being installed on the compromised PC, it will make modifications on the compromised web browser. Savings Vault attacks Google Chrome, Internet Explorer, and Mozilla Firefox. Mainly, Savings Vault is loaded as a plug-in to the web browser, which permits it to launch whenever PC users are surfing the Internet. Savings Vault is not damaging; however, some web users report it to be annoying because it displays pop-up advertisements on the desktop while they are doing online shopping. Pop-up advertisements generated by Savings Vault carry web-links to websites and services, which offer coupons and savings.

SpyHunter Detects & Remove Savings Vault

Registry Details

Savings Vault may create the following registry entry or registry entries:
CLSID
{11111111-1111-1111-1111-110211391186}
Software\AppDataLow\Software\Savings Vault
SOFTWARE\Classes\CrossriderApp0023986.BHO
SOFTWARE\Classes\CrossriderApp0023986.BHO.1
SOFTWARE\Classes\CrossriderApp0023986.Sandbox
SOFTWARE\Classes\CrossriderApp0023986.Sandbox.1
Software\Cr_Installer\23986
Software\InstalledBrowserExtensions\215 Apps\23986
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110211391186}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211391186}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211391186}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Savings Vault-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Tracing\Savings Vault-InternalInstaller_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Savings Vault-InternalInstaller_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\Savings Vault_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Savings Vault_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211391186}

Directories

Savings Vault may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\alocmpjlljemiokibhkkhikmkakdiaeh
%LOCALAPPDATA%\Savings Vault
%LOCALAPPDATA%\Updater23986
%PROGRAMFILES%\Savings Vault
%PROGRAMFILES(x86)%\Savings Vault

Trending

Most Viewed

Loading...