Home Malware Programs Adware Adware.SavingsMagnet

Adware.SavingsMagnet

Posted: April 4, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 356
First Seen: April 4, 2013
Last Seen: January 1, 2024
OS(es) Affected: Windows

SavingsMagnet Screenshot 1Savings Magnet is an adware application that displays coupon offers and pop-up advertisements on numerous websites. Savings Magnet enters into vulnerable computer systems bundled with free applications. Savings Magnet is downloaded to targeted PCs automatically, unless PC users deselect an option to download Savings Magnet while installing a desired program. It is a very popular way for third parties to advertise their software products this way as PC users are urged to check these applications out. Although Savings Magnet can offer some useful coupons and discounts for computer users, usually it makes them get annoyed by a large amount of pop-up ads displayed. These ads may redirect PC users to some hijacked websites where web users can get their computer systems affected with malware infections. Savings Magnet adware is an unwanted application, which needs to be removed with a decent anti-malware tool.

SavingsMagnet Screenshot 2

Aliases

Trj/CI.A [Panda]W32/Scarsi.FP!tr [Fortinet]Trojan.Win32.Scarsi [Ikarus]Spyware/Win32.Zbot [AhnLab-V3]Trojan/Win32.Chifrax.gen [Antiy-AVL]TR/Dropper.Gen [AntiVir]Trojan.PWS.Panda.786 [DrWeb]UnclassifiedMalware [Comodo]Trojan.Win32.Scarsi.rys [Kaspersky]Win32:Malware-gen [Avast]Artemis!45D461260F14 [McAfee]Trj/Agent.MIZ [Panda]W32/Agent.ADFH!tr [Fortinet]Trojan.Msil [Ikarus]Mal/Generic-S [Sophos]
More aliases (65)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\9C42.exe File name: 9C42.exe
Size: 8.17 KB (8176 bytes)
MD5: 6a684ad5f28e71df28494f1eb63f764f
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: April 8, 2013
SavingsMagnet.exe File name: SavingsMagnet.exe
Size: 290.58 KB (290584 bytes)
MD5: ae3c6367ab3a7911df6ce5941757a9ea
Detection count: 11
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: April 4, 2013
Savings Magnet.exe File name: Savings Magnet.exe
Size: 981.89 KB (981896 bytes)
MD5: 05dc0b6fc1c85a18bd37cd9643f11016
Detection count: 10
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 11, 2013
%ALLUSERSPROFILE%\Intel0\mwvaztybt.exe File name: mwvaztybt.exe
Size: 1.22 MB (1221264 bytes)
MD5: 45d461260f149a4c7b2f7272fcaa5e7c
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Intel0
Group: Malware file
Last Updated: April 10, 2013
%TEMP%\winggom.cnc File name: winggom.cnc
Size: 435.22 KB (435224 bytes)
MD5: d342df7e876727bdea0b0ff99ddcc370
Detection count: 5
Mime Type: unknown/cnc
Path: %TEMP%
Group: Malware file
Last Updated: April 8, 2013

Registry Modifications

The following newly produced Registry Values are:

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{F16247B8-CD07-40C4-8C96-FC2568G29E8F}}_is1

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\SavingsMagnet%APPDATA%\Microsoft\Windows\Start Menu\Programs\SavingsMagnet%PROGRAMFILES%\Savings Magnet%PROGRAMFILES(x86)%\Savings Magnet
Loading...