Home Malware Programs Adware SaverAddon

SaverAddon

Posted: June 12, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 675
First Seen: June 12, 2014
Last Seen: October 3, 2022
OS(es) Affected: Windows


SaverAddon is an adware program based on the JustPlug.it platform, with installation methods that may not require the PC user's consent. Since SaverAddon's advertisements aren't beneficial to either the performance or safety of your browser, malware researchers recommend avoiding this adware, or deleting SaverAddon when avoiding it is impossible. SaverAddon includes elements that may affect more than one browser, although standardized anti-adware solutions should be able to identify, isolate and remove all of its files and settings modifications.

The Add-On that will not Save You from Marketing

Since the profitability of redirecting traffic to online advertisements remains a cheap and reliable revenue source, adware like SaverAddon still is a recurring security problem and general nuisance. Although JustPlug, a general 'design your own extension' style platform, is the underlying basis of this adware, SaverAddon's designers haven't been creative with this design platform's features. SaverAddon provides no particular benefits to its users, but does cause you to be exposed to advertising content that could endanger you. Malware experts find it relatively straightforward to identify SaverAddon's advertisements through symptoms that include:

  • Additional pop-up windows that may be created, irrespective of which sites you're browsing at the time.
  • Highlighted text-based links that appear in websites not prone to hosting such content.
  • Banners and other graphical elements being seen in sites that, as with the prior symptom, don't ordinarily host them.
  • Normal advertising content being replaced with offers from SaverAddon's affiliates.

In all cases, these functions are intended to redirect you to advertisements that may profit SaverAddon's developers, but hold limited to no advantageous content for their audiences.

Saving Your Browser from SaverAddon Advertisements

Some of SaverAddon's components may use randomized names, and its exploitation of the Windows Service system may allow SaverAddon to maintain itself independently from any single web browser. In addition, SaverAddon may be installed via the InstalleRex-WebPick utility, which may install additional PUPs on your computer at the same time. Malware experts recommend using specialized anti-adware tools, rather than your browser's add-on managers, to be certain that you've deleted SaverAddon with no oversights.

Even if you had an interest in SaverAddon or its company, malware analysts have found zero independent download links for it; like most adware, SaverAddon may be distributed through bundles with other programs. As a safeguard against these types of installation tactics, malware researchers suggest scanning suspicious files routinely and evading all sites that have histories of disreputable download practices. Like the many, other adware programs preceding it, SaverAddon is a significant security risk only for those who drop their guard.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\SAverAdddon\ITdIla2CH_.dll File name: ITdIla2CH_.dll
Size: 424.44 KB (424448 bytes)
MD5: 52e79e6279de564530d9d9c21cdf0f08
Detection count: 85
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SAverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaVerAdddon\luCB.dll File name: luCB.dll
Size: 424.96 KB (424960 bytes)
MD5: c7ac2d693994a34b84026a174af59acc
Detection count: 85
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaVerAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverADddonu\kAxNmF.dll File name: kAxNmF.dll
Size: 427 KB (427008 bytes)
MD5: 8a45e36148082dff2aca749cf213b65b
Detection count: 73
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverADddonu
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverADddon\XT0rrN.x64.dll File name: XT0rrN.x64.dll
Size: 476.16 KB (476160 bytes)
MD5: 3232f1027871f66e791514ff998a1a1d
Detection count: 66
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverADddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\x4M.x64.dll File name: x4M.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: 26ccf11718426278ed77b945d0f0a5ab
Detection count: 62
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SAverAdddon\d1KJXjcJ5.x64.dll File name: d1KJXjcJ5.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: eda7dc0676a9d1dc6c2b197e1fe8730d
Detection count: 61
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SAverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SAverAdddOn\ft7O.dll File name: ft7O.dll
Size: 427 KB (427008 bytes)
MD5: fb3596716d3021da2895ac4c32d41560
Detection count: 55
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SAverAdddOn
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\l.x64.dll File name: l.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: a3e71637e10097c90f8ce4af9526e506
Detection count: 54
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\N0_W6N.x64.dll File name: N0_W6N.x64.dll
Size: 471.04 KB (471040 bytes)
MD5: 4e6dfd5b8cc1b141a2e071373813a0c2
Detection count: 46
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\MNaM.x64.dll File name: MNaM.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: b3d8195a923e70bcb992466ece7fc953
Detection count: 41
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SSaverAddDon\1tmsfoz.x64.dll File name: 1tmsfoz.x64.dll
Size: 473.6 KB (473600 bytes)
MD5: b2aeb9fdc86c8e3370f5e4526ba9a8e1
Detection count: 35
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SSaverAddDon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\5e.dll File name: 5e.dll
Size: 423.42 KB (423424 bytes)
MD5: a70ce535fb0f35fdbbf5bee9909235e7
Detection count: 33
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SAverAdddon\XFA.x64.dll File name: XFA.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: 8cf7cbc4b964e6bbc5b653b4affd6029
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SAverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\Z8kfD1Z1cP.x64.dll File name: Z8kfD1Z1cP.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: 9ce8d1ad9bf0fb0408274ea75978f676
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaveRAdDDon\ftrhx4.x64.dll File name: ftrhx4.x64.dll
Size: 474.62 KB (474624 bytes)
MD5: f5de4fe33c0d59eb37c6a20668e93b6e
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaveRAdDDon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\9HUOb.x64.dll File name: 9HUOb.x64.dll
Size: 474.11 KB (474112 bytes)
MD5: 377d5baee11ffbb78765b18150a84a07
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\8Et84m86u.x64.dll File name: 8Et84m86u.x64.dll
Size: 477.18 KB (477184 bytes)
MD5: 91dea450c30556b27b77a0537fea0c20
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\K6y_QanRqj.x64.dll File name: K6y_QanRqj.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: 25ca3e3d1bf650e83c46a3f76962bbbc
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SavErAdddonu\64Tqin.x64.dll File name: 64Tqin.x64.dll
Size: 476.16 KB (476160 bytes)
MD5: df5e27ed623c4afeb7464cee467b4fd3
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SavErAdddonu
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverADDdon\d8enDdGI.x64.dll File name: d8enDdGI.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: ed2793d5a1e4be354acd0301771d51a8
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverADDdon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaverAdddon\iEe75wt8Kf.x64.dll File name: iEe75wt8Kf.x64.dll
Size: 477.69 KB (477696 bytes)
MD5: c11c06af70b85a80422a7792c1a8a280
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\SaVerAdddon\A9QFFrYK.x64.dll File name: A9QFFrYK.x64.dll
Size: 469.5 KB (469504 bytes)
MD5: f08afd6edec4e19e1419d57bf6cf879e
Detection count: 0
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\SaVerAdddon
Group: Malware file
Last Updated: September 23, 2014
%ALLUSERSPROFILE%\Dati applicazioni\SaverAdddon\k_gLNC.dll File name: k_gLNC.dll
Size: 428.03 KB (428032 bytes)
MD5: 8677aaa4964507ca55a93ec82b1d1805
Detection count: 0
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Dati applicazioni\SaverAdddon
Group: Malware file
Last Updated: September 23, 2014

More files

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\SaverAddon%ALLUSERSPROFILE%\SaverAddon%PROGRAMFILES%\SaverAddon%PROGRAMFILES(x86)%\SaverAddon
Loading...