Home Malware Programs Adware Flash Savings

Flash Savings

Posted: November 13, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 356
First Seen: November 13, 2013
Last Seen: October 18, 2023
OS(es) Affected: Windows

Flash Savings Screenshot 1Flash Savings is an adware program that may display random and repeated online saving deals. Some of the Flash Savings deals are presented as coupons or online shopping site links. Some of the Flash Savings ad links may redirect users to unwanted sites or ones that attempt to offer additional online saving deals. Stopping the Flash Savings deals from interrupting use of your web browser usually requires detecting and removing all related Flash Savings files and applications on your system.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



FlashSavings.exe File name: FlashSavings.exe
Size: 3.89 MB (3892696 bytes)
MD5: 2870883758a0de804efa9e82342c2bf4
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: August 17, 2022

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110311601144}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Flash Savings-bg.exe

Additional Information

The following directories were created:
%APPDATA%\Flash Savings%LOCALAPPDATA%\Google\Chrome\User Data\Default\Local Extension Settings\fbenpiolokokkkaefgainlkobadlmdid%LocalAppData%\Flash Savings%LocalAppData%\Google\Chrome\User Data\Default\Extensions\fbenpiolokokkkaefgainlkobadlmdid%LocalAppData%\Updater36044%ProgramFiles%\Flash Savings%ProgramFiles(x86)%\Flash Savings%USERPROFILE%\AppData\LocalLow\Flash Savings
The following URL's were detected:
Flash Savings
Loading...