Home Malware Programs Potentially Unwanted Programs (PUPs) Save Clicker

Save Clicker

Posted: January 24, 2014

Threat Metric

Ranking: 14,768
Threat Level: 2/10
Infected PCs: 2,120
First Seen: January 24, 2014
Last Seen: October 9, 2023
OS(es) Affected: Windows


Save Clicker, also known as SaveClicker, is a potentially unwanted application that may create disturbing discount coupon ads when PC users are visiting online shopping websites. The authors of the Save Clicker browser add-on claim that Save Clicker can save time and money while shopping online by automatically displaying lowest prices, discounts, coupons and the hottest sales of the selected products. However, in truth, Save Clicker plug-in is categorized as adware, and it is not recommended using this browser extension. Save Clicker may be advertised and spread to computers through bundled freeware and bogus downloads, for example, fake Java downloads and fake browser updates, and install itself on the PC without the computer user's authorization. When installed, Save Clicker may keep track of the computer user's Internet surfing activities by recording IP address, websites visited, and operating system information. Save Clicker may slow down popular Web browsers such as Internet Explorer, Google Chrome, and Mozilla Firefox and may disturb the normal working of the computer system.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\ProgramData\saveclicker\Pqzda.exe File name: C:\ProgramData\saveclicker\Pqzda.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\saveclicker.saveclickerSOFTWARE\Classes\saveclicker.saveclicker.2.1SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{111C0461-4D27-3F40-F6A1-EEBA12553904}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{35b97e72-7ead-47a1-963b-443275f82093}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{860F3314-0BF8-6566-7F28-FEBDFAD83380}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{9816990A-0221-916D-2372-110F1ACF9632}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{D3CAD896-7372-944D-563B-75CC6DBE9914}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{FAB5A205-FE09-1BBE-FEEB-7D0781988C3D}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{111C0461-4D27-3F40-F6A1-EEBA12553904}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{1E092842-7999-DA0B-FC97-9FCE3FB05A56}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\saveclicker%ALLUSERSPROFILE%\saveclicker%APPDATA%\{111C0461-4D27-3F40-F6A1-EEBA12553904}%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\{111C0461-4D27-3F40-F6A1-EEBA12553904}%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\{A1C842A9-B4ED-5E7A-299D-93B2AA846448}%PROGRAMFILES%\saveclicker%PROGRAMFILES(X86)%\saveclicker%USERPROFILE%\AppData\LocalLow\{111C0461-4D27-3F40-F6A1-EEBA12553904}%UserProfile%\Local Settings\Application Data\Packages\windows_ie_ac_001\AC\{A1C842A9-B4ED-5E7A-299D-93B2AA846448}
The following URL's were detected:
SaveClickerSaveclickersoft.info
Loading...