Home Malware Programs Adware BuyNSave

BuyNSave

Posted: November 24, 2014

Threat Metric

Ranking: 9,324
Threat Level: 2/10
Infected PCs: 8,085
First Seen: November 21, 2014
Last Seen: September 25, 2023
OS(es) Affected: Windows

BuyNSave is another browser extension that is categorized as adware. Browser extensions such as BuyNSave are known to possess adware symptoms like using pop-ups to promote certain websites. Pop-ups by BuyNSave are known to be directly related to users' browsing history and habits. BBuyNSave browser extension injects your browser with relevant ads based on your browsing history to increase the effectiveness of the ads. In addition to browsing history-based ad serving, these targeted ads are designed to drive traffic to certain sites. The distribution methods of adware-related programs such as BuyNSave are many. In most cases, such extensions can be found bundled with other free software.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{42b0020b-a168-4ceb-bbb1-d8ff1a8c0840}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{e3acdef0-311c-47b6-a3cf-c4304c55df3e}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\BuyNsave%ALLUSERSPROFILE%\gdkdohhgoifdefgpdpigjkdfjelnojbf%PROGRAMFILES%\BuyNsave%PROGRAMFILES(x86)%\BuyNsave
The following URL's were detected:
BuyNsave
Loading...