Home Malware Programs Potentially Unwanted Programs (PUPs) Savings Champion

Savings Champion

Posted: May 20, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 443
First Seen: May 20, 2014
Last Seen: May 2, 2022
OS(es) Affected: Windows


Savings Champion is a potentially unwanted program (PUP) that is produced by Smart Apps. Savings Champion may carry browser hijacker and adware functionalities that may help alter the default start page, search service or a new tab window on the PC without the computer user's authorization. Savings Champion may affect and integrate itself into Internet Explorer, Google Chrome, Mozilla Firefox, and Safari Web browsers. Savings Champion may spread and install itself on the computer system as an additional application packaged with free software or other third-party programs that PC users download from unreliable download websites. Savings Champion may insert a plug-in, add-on or browser extension on the PC. Savings Champion may unwillingly divert computer users to untrustworthy websites that may be designed for commercial aims. Savings Champion may show non-stop pop-up advertisements and notifications most likely with the goal to generate advertising revenue from ad clicks. Savings Champion may also aim to gain profit from raised website traffic.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\Savings Champion\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 297.51 KB (297512 bytes)
MD5: fc86250b2aca1909af853105d916bf9c
Detection count: 74
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345648 bytes)
MD5: 68846bb9d0cb5e8745b6fc8c964064ef
Detection count: 60
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 282.67 KB (282672 bytes)
MD5: 317799c0ffbf35b2f84702ea9eabebca
Detection count: 34
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345648 bytes)
MD5: 9e257875f4837faa6a04652b3b13fe3b
Detection count: 33
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 282.66 KB (282664 bytes)
MD5: c0d7c984bbcfcdc57b24b1cd3e1678b8
Detection count: 31
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES%\Savings Champion\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 258.08 KB (258088 bytes)
MD5: 51c2b3abeae26779c5e0f88db932a969
Detection count: 31
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 753b7eccb85bff16076eb0265d0381c4
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345640 bytes)
MD5: 2e9359b4d53b3bdd8d8414a007edf032
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345648 bytes)
MD5: d6eaad90f319bdc0ea9d024a25de6b17
Detection count: 24
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345648 bytes)
MD5: 8f98583ea74fe4bb45699e175cbdd02a
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345640 bytes)
MD5: 2249dc12b91e1b70c682c7016d13afcd
Detection count: 20
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: 6e27961911e811ce3e30246f3bf98d6d
Detection count: 15
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 4c2c3be14d887c6e497c9a5904f1ba29
Detection count: 13
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES%\Savings Champion\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 258.08 KB (258088 bytes)
MD5: c905ecc97a479271665a88013c12d982
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 282.67 KB (282672 bytes)
MD5: 38812bcdaa995b8bc1f2cdfaa1e7d2b0
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES%\Savings Champion\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 288.81 KB (288816 bytes)
MD5: 72917e40a4835a785dfba941a55fb1a1
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES%\Savings Champion\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 282.67 KB (282672 bytes)
MD5: 352526aec6dcfd829fbbfd9e5f0ecbb7
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345640 bytes)
MD5: 288846c25a830cf6f433a4b86ad7b8a2
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES%\Savings Champion\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 288.81 KB (288816 bytes)
MD5: 71eee0d2369525bd36884c22660f6493
Detection count: 4
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
%PROGRAMFILES(x86)%\Savings Champion\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 282.67 KB (282672 bytes)
MD5: 51149b87fc5b69e96ed1c55cea25c4e0
Detection count: 1
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Savings Champion
Group: Malware file
Last Updated: May 27, 2014
C:\Users\<username>\appdata\Local\Savings Champion\SoftwareDetector.exe File name: C:\Users\<username>\appdata\Local\Savings Champion\SoftwareDetector.exe
MD5: 978f45df5fc28f83f9fa82905757720e
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\Savings Champion\sqlite3.exe File name: C:\Users\<username>\appdata\Local\Savings Champion\sqlite3.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\Savings Champion\SoftwareDetector.exe File name: C:\Users\<username>\appdata\Local\Savings Champion\SoftwareDetector.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\Savings Champion\gpedit.exe File name: C:\Users\<username>\appdata\Local\Savings Champion\gpedit.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\Savings Champion\uninstall.exe File name: C:\Users\<username>\appdata\Local\Savings Champion\uninstall.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\38958SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{E5DDA13C-89E7-4CBC-8CDE-5659EE9C82DA}SOFTWARE\Wow6432Node\38958

Additional Information

The following directories were created:
%AppData%\Microsoft\Windows\Start Menu\Programs\Savings Champion%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\dbjhpkddannodomhdemoefbggakoldim%LOCALAPPDATA%\Savings Champion%PROGRAMFILES%\Savings Champion%PROGRAMFILES(x86)%\Savings Champion%USERPROFILE%\AppData\LocalLow\{E5DDA13C-89E7-4CBC-8CDE-5659EE9C82DA}
Loading...