Home Malware Programs Adware Plain Savings Ads

Plain Savings Ads

Posted: March 30, 2015

Threat Metric

Threat Level: 2/10
Infected PCs: 1,068
First Seen: March 30, 2015
Last Seen: September 2, 2024
OS(es) Affected: Windows

Plain Savings is another adware browser extension that can be installed on the most popular web browsers. Typically, adware developers utilize questionable distribution methods when it comes to spreading their products, so users might find Plain Savings bundled with other free applications. In addition, it is highly likely that you have been misled by extensions such as Plain Savings as their creators often claim that the app provides certain useful features. For example, Plain Savings claims to save money and time for users in their online shopping. However, in order to present user-orientated and appealing advertisements, adware add-ons like Plain Savings are known to collect information on your browsing habits.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{36D6C77D-9611-41D8-AA89-4EA67065E7CC}Software\Plain SavingsSOFTWARE\Wow6432Node\Microsoft\Tracing\updatePlainSavings_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updatePlainSavings_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\utilPlainSavings_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\utilPlainSavings_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{36d6c77d-9611-41d8-aa89-4ea67065e7cc}SOFTWARE\Wow6432Node\Plain SavingsSYSTEM\ControlSet001\services\eventlog\Application\Update Plain SavingsSYSTEM\ControlSet001\services\eventlog\Application\Util Plain SavingsSYSTEM\ControlSet001\services\Update Plain SavingsSYSTEM\ControlSet001\services\Util Plain SavingsSYSTEM\ControlSet002\services\eventlog\Application\Update Plain SavingsSYSTEM\ControlSet002\services\Update Plain SavingsSYSTEM\CurrentControlSet\services\eventlog\Application\Update Plain SavingsSYSTEM\CurrentControlSet\services\eventlog\Application\Util Plain SavingsSYSTEM\CurrentControlSet\services\Update Plain SavingsSYSTEM\CurrentControlSet\services\Util Plain SavingsHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Plain Savings

Additional Information

The following directories were created:
%PROGRAMFILES%\Plain Savings%PROGRAMFILES(x86)%\Plain Savings%TEMP%\Plain Savings
Loading...