Threat Database Adware Tiger Savings

Tiger Savings

By Domesticus in Adware

Threat Scorecard

Ranking: 8,334
Threat Level: 20 % (Normal)
Infected Computers: 1,236
First Seen: April 11, 2013
Last Seen: September 11, 2023
OS(es) Affected: Windows

Tiger Savings is an adware application that shows a variety of coupons on the compromised PC while Internet users are surfing the Internet. Pop-up messages shown by Tiger Savings emerge on well-known websites including Facebook, eBay, Amazon and others. Tiger Savings is usually embedded into Internet Explorer, Mozilla Firefox or Google Chrome. Tiger Savings is installed together with free programs downloads that computer users download from the web. Tiger Savings can access the targeted computer secretly because often PC users do not pay much attention to installation steps when performing them. This way PC users do not deselect an option that says to download Tiger Savings and software is installed automatically on their PCs. Tiger Savings can result in annoying hits to hacked websites or urge to click on a malevolent link. Tiger Savings can trace the attacked computer user's online activities and can even gain access to his/her login information or passwords. Tiger Savings can keep track of which websites the web user is visiting, and then transfers this information to the distant server and later

uses it for marketing intentions.

SpyHunter Detects & Remove Tiger Savings

Registry Details

Tiger Savings may create the following registry entry or registry entries:
CLSID
{11111111-1111-1111-1111-110111271167}
{22222222-2222-2222-2222-220122272267}
{44444444-4444-4444-4444-440144274467}
{55555555-5555-5555-5555-550155275567}
{66666666-6666-6666-6666-660166276667}
Software\AppDataLow\Software\Crossrider\onBeforeNavigate\12767
Software\AppDataLow\Software\Crossrider\onRequest\12767
Software\AppDataLow\Software\Tiger Savings
SOFTWARE\Classes\CrossriderApp0012767.BHO
SOFTWARE\Classes\CrossriderApp0012767.BHO.1
SOFTWARE\Classes\CrossriderApp0012767.Sandbox
SOFTWARE\Classes\CrossriderApp0012767.Sandbox.1
Software\Cr_Installer\12767
Software\InstalledBrowserExtensions\215 Apps\12767
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111271167}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111271167}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Updater12767.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111271167}
SOFTWARE\Tiger Savings
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111271167}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111271167}
SOFTWARE\Wow6432Node\Microsoft\Tracing\Tiger Savings_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Tiger Savings_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111271167}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111271167}
SOFTWARE\Wow6432Node\Tiger Savings

Directories

Tiger Savings may create the following directory or directories:

%LOCALAPPDATA%\Tiger Savings
%LOCALAPPDATA%\Updater12767
%PROGRAMFILES%\Tiger Savings
%PROGRAMFILES(x86)%\Tiger Savings
%UserProfile%\Local Settings\Application Data\Tiger Savings
%UserProfile%\Local Settings\Application Data\Updater12767

URLs

Tiger Savings may call the following URLs:

Tiger Savings

Trending

Most Viewed

Loading...