Threat Database Adware Savings Wave

Savings Wave

By ESGI Advisor in Adware

Threat Scorecard

Ranking: 8,101
Threat Level: 20 % (Normal)
Infected Computers: 6,949
First Seen: September 23, 2013
Last Seen: September 13, 2023
OS(es) Affected: Windows

Savings Wave is an adware application that delivers unwanted pop-up advertisements and advertising banners on Amazon, Youtube, Ebay, Walmart and other websites that are visited by online users. Savings Wave pop-up advertisements will be shown as boxes, which incorporate various coupons that are available or as underlined keywords, which when clicked will show an advertisement that allegedly comes to the Internet user by Savings Wave. Savings Wave is an add-on for Internet Explorer, Mozilla Firefox and Google Chrome that is usually embedded when web users install other free programs, such as PDF creators, download-managers or video recording/streaming, that might had packed into their installation Savings Wave. When PC users install these free tools, they may also install Savings Wave. While being installed, whenever the computer user will visit Best Buy, Expedia, Facebook or any other website, Savings Wave will show a 'See Similar' button on product images, which when clicked will show pop-up ads by Savings Wave. Savings Wave may also deliver advertising banners on the websites that computer users are visiting, and as they surf the net, it will deliver coupons and other deals available on a variety of websites.

SpyHunter Detects & Remove Savings Wave

File System Details

Savings Wave may create the following file(s):
# File Name MD5 Detections
1. FrameworkBHO.dll c6ae7077c991fc496988f62443bc5c2d 69
2. FrameworkBHO64.dll fa09f8ec04b40a4d0a88d626af8673f0 9
3. Savings Wave-updater.exe f3f4ba02aa343db22d6c8c890045b2df 2
4. FrameworkBHO.dll 81d0f0a3906a14b47a9893727b23d57f 1
5. FrameworkBHO.dll 13855c6b59f1f777dc515f35e44b7f3e 1
6. FrameworkBHO.dll c223b05e670ab8c2a8cd22e0144c0b01 1
7. FrameworkEngine.exe fd022c30ef73b425665542d756d9c4f9 1
8. FrameworkBHO64.dll 8d6206c0b5e2b9bf9ae3cd5df797ef6a 1
9. FrameworkBHO64.dll 89c7b436194de8d2d4f8ab8395fa3366 1
10. FrameworkEngine.exe 4c065b7a992d4acafb867b13cbfc0b25 1
11. FrameworkBHO64.dll d78592eae2dba69c2343029cd3b206e7 1
12. FrameworkEngine.exe c1d2b78e72971cd8d4216748d7e1bc0d 1
13. FrameworkEngine.exe 17519975ba37645d46f5c4fbe94f8886 1
14. FrameworkEngine.exe c8053e90a78ac48109dfcca081d61ee8 1
15. FrameworkBHO.dll cb7bb05db8acc617825b22657aa39904 1
16. FrameworkEngine.exe 213f74fb9543ee5c996f49c9e6e8bd45 1
17. FrameworkBHO.dll f798454ae31ab688307814c9627bbbec 1
18. FrameworkEngine.exe e17ffa7dc5fb29aa1e463c2f23f6530e 1
19. FrameworkBHO.dll 76c8d132f2393602a52497783942d403 1
20. FrameworkEngine.exe 76159d3b14aa9fa589f122fff4cdc716 1
21. FrameworkBHO.dll 01e0f4c0860db0acc6079878cbefd078 1
22. FrameworkBHO.dll 16bd89af4e26d800f0b6e7f7196104d8 1
23. FrameworkBHO.dll bb1b1e494025df5159256d764be69b86 1
24. FrameworkBHO64.dll d70dcf6d32164f10da61f06e496b35b1 1
25. FrameworkBHO.dll b60af94f3e1ffec90d3f67ac8f57bd9c 1
26. FrameworkEngine.exe eb2e8e9fd6fca5dc3fbc20512c2ef74d 1
27. FrameworkBHO.dll 8f46f03a3969be8e533dd8b094853b69 1
More files

Registry Details

Savings Wave may create the following registry entry or registry entries:
CLSID
{11111111-1111-1111-1111-110111271165}
{1DB0B3DE-46A7-4BD1-BE99-79BA4441B56C}
{22222222-2222-2222-2222-220122272265}
{44444444-4444-4444-4444-440144274465}
{55555555-5555-5555-5555-550155275565}
{587D9DE0-E7BD-403C-85C9-18C6E74CCA6F}
{66666666-6666-6666-6666-660166276665}
{711BC232-43EE-4460-9F5F-3E5A46182646}
{71ADC26E-438C-4450-BEBF-145AFD188246}
{B313DEAE-5D45-48B8-9FF5-DA7428A96101}
{B320DE57-5D61-487F-B689-D074B7A93901}
{FDE634B1-36EE-4A17-9BDD-DDEFE9B6707E}
{FDE7341D-3650-4ACF-8498-4CEFE8B6EA7E}
Software\AppDataLow\Software\Crossrider\onBeforeNavigate\12765
Software\AppDataLow\Software\Crossrider\onRequest\12765
Software\AppDataLow\Software\Savings Wave
SOFTWARE\Classes\CrossriderApp0012765.BHO
SOFTWARE\Classes\CrossriderApp0012765.BHO.1
SOFTWARE\Classes\CrossriderApp0012765.Sandbox
SOFTWARE\Classes\CrossriderApp0012765.Sandbox.1
Software\InstalledBrowserExtensions\Innovative Apps\12765
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110111271165}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DB0B3DE-46A7-4BD1-BE99-79BA4441B56C}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111271165}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110111271165}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDE634B1-36EE-4A17-9BDD-DDEFE9B6707E}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110111271165}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDE634B1-36EE-4A17-9BDD-DDEFE9B6707E}
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Savings Wave-repairJob
Software\Proxy\installations\Savings Wave
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DB0B3DE-46A7-4BD1-BE99-79BA4441B56C}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111271165}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\Savings Wave-repairJob
SOFTWARE\Wow6432Node\Proxy\Installations\Savings Wave
SOFTWARE\Wow6432Node\Savings Wave

Directories

Savings Wave may create the following directory or directories:

%AppData%\Microsoft\Windows\Start Menu\Programs\Savings Wave
%LOCALAPPDATA%\Savings Wave
%PROGRAMFILES%\Savings Wave
%PROGRAMFILES%\Savings Wave Plugin
%PROGRAMFILES(x86)%\Savings Wave
%PROGRAMFILES(x86)%\Savings Wave Plugin
%USERPROFILE%\AppData\LocalLow\{FDE634B1-36EE-4A17-9BDD-DDEFE9B6707E}

Trending

Most Viewed

Loading...