Home Malware Programs Adware SavingsApp

SavingsApp

Posted: February 7, 2013

Threat Metric

Ranking: 16,927
Threat Level: 2/10
Infected PCs: 934
First Seen: February 7, 2013
Last Seen: September 29, 2023
OS(es) Affected: Windows

SavingsApp is an adware program that displays its own ads on eBay, Amazon, Facebook and other websites that computer users are visiting.These ads will be displayed as boxes including numerous coupons that are available or as underlined keywords, which when clicked will show an advertisement that declares it is sent to you by SavingsApp. SavingsApp is an add-on for Mozilla Firefox, Google Chrome, and Internet Explorer that is usually added when PC users install other free software products. When PC users install these free software products, they will also install SavingsApp. Some of the applications that are known to come bundled with SavingsApp involve 1ClickDownload, Yontoo and FBPhotoZoom. When installed, SavingsApp will show in the right top part of a web browser, a box, which contains relevant keyword suggestions, sponsored links, and ads, whenever computer users will attempt to use a search form in Google, Ebay, Facebook or any other websites. SavingsApp will show various advertising boxes on Amazon, Wallmart and other websites with the message 'Ads not by this site'.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{11111111-1111-1111-1111-110011461139}{22222222-2222-2222-2222-220022462239}{44444444-4444-4444-4444-440044464439}HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\SavingsApp

Additional Information

The following directories were created:
%LOCALAPPDATA%\SavingsApp%PROGRAMFILES%\SavingsApp%PROGRAMFILES(x86)%\SavingsApp%UserProfile%\Local Settings\Application Data\SavingsApp

Related Posts

Loading...