Home Malware Programs Adware SaveitKeep

SaveitKeep

Posted: June 12, 2014

Threat Metric

Ranking: 17,060
Threat Level: 2/10
Infected PCs: 4,225
First Seen: June 12, 2014
Last Seen: July 27, 2023
OS(es) Affected: Windows


SaveitKeep is adware that could display random advertisements while you are surfing the internet. Usually the SaveitKeep ads will load when a web browser program is opened. In most cases the plugins and add-ons related to SaveitKeep will allow the ads to be displayed on various websites you view. Loading of SaveitKeep may take place upon booting Windows. Use of the SaveitKeep ads may redirect your browser to unwanted and questionable sites. Putting a stop to the SaveitKeep ads and pop-ups may require seeking out all related plugins and add-ons and then removing each of them. Automatically removing SaveitKeep is possible also through the use of antimalware application.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\SaveiTkeep\HhARI.x64.dll File name: HhARI.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: cd68e15202187abd921dcc2ed719606c
Detection count: 96
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaveiTkeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkeeip\f.dll File name: f.dll
Size: 422.91 KB (422912 bytes)
MD5: fdfd6b3dfa30480c292718f997906c9a
Detection count: 85
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkeeip
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\SaveitkeeeP\qEJ0_2cF5.dll File name: qEJ0_2cF5.dll
Size: 423.93 KB (423936 bytes)
MD5: 042c662efa5c970caacc3e1bb7ac1e96
Detection count: 80
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaveitkeeeP
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkeeP\F.x64.dll File name: F.x64.dll
Size: 472.06 KB (472064 bytes)
MD5: 0e55e4e190365fbebd6dd47c390c4b44
Detection count: 80
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkeeP
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkaeep\oIROO7e9D.dll File name: oIROO7e9D.dll
Size: 425.98 KB (425984 bytes)
MD5: e9526d7b7d4e1bd9d85c1f96b41765e3
Detection count: 73
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkaeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveItkeep\fERMDS.x64.dll File name: fERMDS.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: 8a7345aa399ce3033cfb80b1815cc625
Detection count: 72
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveItkeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkEepi\W2pWbj.dll File name: W2pWbj.dll
Size: 425.47 KB (425472 bytes)
MD5: 3163e3e133d3a0cbc4a2afaf83f7dc60
Detection count: 62
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkEepi
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkeep\pMS.x64.dll File name: pMS.x64.dll
Size: 473.6 KB (473600 bytes)
MD5: 87adcfb6256dde346985129ad2b73d30
Detection count: 56
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\SaVeItKeEup.o\1r.dll File name: 1r.dll
Size: 425.47 KB (425472 bytes)
MD5: 06c632e200e0e5aaf9720738a9ba20f8
Detection count: 54
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaVeItKeEup.o
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkeepp\Tq.x64.dll File name: Tq.x64.dll
Size: 477.18 KB (477184 bytes)
MD5: 7ec3f7ed6a2c8705cc9eceae3e9a1e2d
Detection count: 52
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkeepp
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitKeep\FJk0eCN.dll File name: FJk0eCN.dll
Size: 424.44 KB (424448 bytes)
MD5: c19b3b989a98deb25d15f50eaa7f12c8
Detection count: 51
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitKeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveiTekeaepe\9rMqC.dll File name: 9rMqC.dll
Size: 423.42 KB (423424 bytes)
MD5: 621ba24d64d7c3c824be342f4ecb6c15
Detection count: 44
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveiTekeaepe
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitKeep\3Ohkpcw.x64.dll File name: 3Ohkpcw.x64.dll
Size: 476.16 KB (476160 bytes)
MD5: 0c76e9bb3b141640090c76c6e80f7ca1
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitKeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\Saveitkeep\5I4JjfQni.x64.dll File name: 5I4JjfQni.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: 9be575adb1ed6063f0c0c78c7d17199f
Detection count: 20
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Saveitkeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkeep\7BzY3veL.dll File name: 7BzY3veL.dll
Size: 425.98 KB (425984 bytes)
MD5: 602e959f456cbacf3ff2e4ae6cf06e24
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkieep\2X6I.dll File name: 2X6I.dll
Size: 425.47 KB (425472 bytes)
MD5: dc79703386f740904caff754e7e1416c
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkieep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\sAveitkeEp\q.x64.dll File name: q.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: e0c11941707bf093b060dcf3d7867d23
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\sAveitkeEp
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveItkeep\r3xZzdrV7.x64.dll File name: r3xZzdrV7.x64.dll
Size: 472.06 KB (472064 bytes)
MD5: 06146397631c7b44126a3a56bd9e888c
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveItkeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\Saveittkeeop\v2L.x64.dll File name: v2L.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: b8478f2c67fcd4225e62e4b9e477e346
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Saveittkeeop
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkeepo\_4Or.dll File name: _4Or.dll
Size: 424.44 KB (424448 bytes)
MD5: 4c94748f951badc4035960fef2fe5978
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkeepo
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\saveitkkeep\3HWIvYg3fL.dll File name: 3HWIvYg3fL.dll
Size: 428.03 KB (428032 bytes)
MD5: 25695a022448882d9da4143e1acbca24
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\saveitkkeep
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\SaVeitakeEp\s.x64.dll File name: s.x64.dll
Size: 473.6 KB (473600 bytes)
MD5: 182a7051741893dcaa6b5829b82da431
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaVeitakeEp
Group: Malware file
Last Updated: June 16, 2014
%ALLUSERSPROFILE%\SaveItkeep\cI.x64.dll File name: cI.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: 0b9e936abb064f94614714f0eb84908f
Detection count: 4
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaveItkeep
Group: Malware file
Last Updated: June 16, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{545B1AC8-CD53-8A2A-E307-03F3EDD80092}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{7A980F86-E783-08B2-FB69-3E964AE5CE44}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\SaveIt%ALLUSERSPROFILE%\SaveitKeep%ALLUSERSPROFILE%\saveitKKeep%PROGRAMFILES%\SaveitKeep%PROGRAMFILES(x86)%\SaveitKeep
The following URL's were detected:
saveitsoft.info
Loading...