Savings Wizard

Savings Wizard Description

Savings Wizard Screenshot 1Savings Wizard is an adware coupon application that is known to display random ads through online gaming sites. Savings Wizard may offer coupon saving deals while it loads offers and redirects to other unwanted sites. Use of Savings Wizard is not recommended as it could lead to several unwanted sites that may eventually cause issues with your computer.

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

At times Savings Wizard may change your default internet settings loading up another site as your default home page. Removal of Savings Wizard will eliminate the unwanted redirects.

Savings Wizard Automatic Detection Tool (Recommended)

Is your PC infected with Savings Wizard? To safely & quickly detect Savings Wizard we highly recommend you run the malware scanner listed below.

Visual & GUI Characteristics

Savings Wizard Screenshot 2Savings Wizard Screenshot 3Savings Wizard Screenshot 4

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions, value: {5682CA62-1A80-40AE-82A0-B67833CE75FF}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{39B931CF-F1E2-4D04-8129-9EE8159A91C5}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5682CA62-1A80-40AE-82A0-B67833CE75FF}SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, value: Savings Wizard-repairJobSOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, value: Savings WizardSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce, value: Savings Wizard-repairJobSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce, value: Savings WizardSOFTWARE\Wow6432Node\Savings Wizard
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path} {39B931CF-F1E2-4D04-8129-9EE8159A91C5}{CE7FAE28-E04D-496F-B56B-CD9E40998548}{41994F48-3EBD-4921-A3FC-A7886C6205B8}{5682CA62-1A80-40AE-82A0-B67833CE75FF}{E7574A3D-0F2D-478D-85F3-9224D7B230EA}{CEADAE6E-E08C-4950-BEBF-149EFD998248}
Posted: November 13, 2013 | By
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Threat Metric
Threat Level: 2/10
Detection Count: 10,057
Home Malware ProgramsAdware Savings Wizard

Leave a Reply

What is 14 + 2 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)