Home Malware Programs Adware Sharp Savings

Sharp Savings

Posted: November 13, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 5,518
First Seen: November 13, 2013
Last Seen: January 17, 2024
OS(es) Affected: Windows

Sharp Savings Screenshot 1Sharp Savings is an adware program that may display several online savings and coupon deal links within a single pop-up window. The Sharp Savings pop-up may redirect users to other unwanted sites and then load other coupon deals while it could change internet settings loading another default home page. The Sharp Savings may be stopped after it has been completely removed using an antispyware tool.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\Sharp Savings\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 297.69 KB (297696 bytes)
MD5: 4f25f4a6638f6b49189288b3bc6df700
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Sharp Savings
Group: Malware file
Last Updated: June 11, 2014
%PROGRAMFILES(x86)%\Sharp Savings\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 492.63 KB (492632 bytes)
MD5: 9eb75344ed97367e09476363321a10ac
Detection count: 42
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Sharp Savings
Group: Malware file
Last Updated: June 11, 2014
%PROGRAMFILES%\Sharp Savings\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 258.08 KB (258088 bytes)
MD5: bfe831ba5bfcf7bfd5790f57db14f533
Detection count: 22
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Sharp Savings
Group: Malware file
Last Updated: June 11, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{1C980C59-3E5B-4493-8187-503EEFBDE91D}{2FADFF6E-ED8C-4B50-BEBF-141FFD08823D}{2FEBFFDC-EDD0-4B49-A10E-BF1FCD08B23D}{DB1B0F76-EBC6-4D94-965D-470EE399C5E1}{DB200F57-EB61-4D7F-B689-D00EB79939E1}{E0445864-8AF4-434F-B0AA-467617D42C05}{E0E7581D-8A50-43CF-8498-4C76E8D4EA05}{E809222C-0A5A-4C8B-918B-EB94058423CF}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E809222C-0A5A-4C8B-918B-EB94058423CF}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E0445864-8AF4-434F-B0AA-467617D42C05}Software\Proxy\installations\Sharp SavingsSOFTWARE\Sharp SavingsSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E809222C-0A5A-4C8B-918B-EB94058423CF}SOFTWARE\Wow6432Node\Proxy\Installations\Sharp SavingsSOFTWARE\Wow6432Node\Sharp SavingsHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}28432_Sharp Savings

Additional Information

The following directories were created:
%LOCALAPPDATA%\Sharp Savings%PROGRAMFILES%\Sharp Savings%PROGRAMFILES(x86)%\Sharp Savings
Loading...