Home Malware Programs Adware bSaving

bSaving

Posted: February 21, 2013

Threat Metric

Ranking: 14,713
Threat Level: 2/10
Infected PCs: 513
First Seen: February 20, 2013
Last Seen: September 10, 2023
OS(es) Affected: Windows

bSaving is an adware program that will display its own ads on Amazon, Walmart, Dell, and other websites that computer users are visiting. These advertisements will be illustrated as boxes carrying a variety of coupons that are available or as underlined keywords, which when clicked will show an advertisement that claims it is sent to computer users by bSaving. bSaving is an add-on for Internet Explorer, Mozilla Firefox and Google Chrome that is mainly added when computer users install other free applications. When PC users install these free applications, they will also install bSaving on their computers. Some of the software products that are known to come bundled with bSaving involve 1ClickDownload, Yontoo and FBPhotoZoom. When installed, whenever PC users will browse Expedia, Best Buy, Facebook or any other similar websites, bSaving will display a box, which contains related ads, keyword suggestions, and sponsored links in the right top part of the compromised web browser.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{DFA2ED70-FC49-11E1-8DF2-9713F663AF89}HKEY..\..\..\..{RegistryKeys}Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{38791CF8-E87C-11E1-881B-7B83F6A1EC23}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}bSaving

Additional Information

The following directories were created:
%LOCALAPPDATA%\bSaving%PROGRAMFILES%\bSaving%PROGRAMFILES(x86)%\bSaving

Related Posts

Loading...