home

Savings Sidekick.dll

Savings Sidekick

Awesome Apps

This web browser extension uses the Crossrider toolbar creation and distribution platform. The module Savings Sidekick.dll, “Savings Sidekick BHO” by Awesome Apps has been detected as adware by 30 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘CrossriderApp0005060’. This file is typically installed with the program Savings Sidekick by 215 Apps which is a potentially unwanted software program. The library is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
215 Apps  (signed by Awesome Apps)

Product:
Savings Sidekick

Description:
Savings Sidekick BHO

Version:
1.1.151.37

MD5:
0d71bb605732ef668157c25893e50f60

SHA-1:
ef86bf8efb33752a296880dd21db53d9a963376f

SHA-256:
dc263a509190f1fb4019af5655799059d87a2ba0d015effe86b958515ef63e9a

Scanner detections:
30 / 68

Status:
Adware

Explanation:
Browser extension that injects additional advertisements (banner and text links) on web pages.

Analysis date:
4/26/2024 2:04:54 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Application.Heur.Ly9@mmvMifki
363

Agnitum Outpost
PUA.Toolbar.CrossRider
7.1.1

AhnLab V3 Security
Win-Trojan/Agent2.M.617344.H
2013.12.24

Avira AntiVirus
ADWARE/CrossRider.A.3132
3.6.1.96

avast!
Win32:Crossrider-AI [PUP]
2014.9-160207

AVG
Skodna
2017.0.2841

Bitdefender
Gen:Variant.Adware.VidSaver.1
1.0.20.190

Bkav FE
W32.HfsAdware
1.3.0.6379

Clam AntiVirus
Win.Adware.Vidsaver-1
0.98/21155

Comodo Security
ApplicUnwnt
17546

Dr.Web
Adware.Plugin.950
9.0.1.038

Emsisoft Anti-Malware
Gen:Variant.Adware.VidSaver
8.16.02.07.09

ESET NOD32
Win32/Toolbar.CrossRider (variant)
10.9245

Fortinet FortiGate
Riskware/Toolbar_CrossRider
2/7/2016

F-Secure
Gen:Variant.Adware.VidSaver.1
11.2016-07-02_1

G Data
Gen:Variant.Adware.VidSaver
16.2.22

IKARUS anti.virus
Win32.SuspectCrc
t3scan.1.8.9.0

K7 AntiVirus
Trojan
13.202.15489

Malwarebytes
PUP.CrossRider.SSK
v2016.02.07.09

McAfee
PUP-FSD
5600.6497

Microsoft Security Essentials
Adware:Win32/Vidsaver
1.165.247.01

MicroWorld eScan
Gen:Variant.Adware.VidSaver.1
17.0.0.114

NANO AntiVirus
Riskware.Win32.CrossRider.desiqc
0.30.8.659

Panda Antivirus
Trj/CI.A
16.02.07.09

Reason Heuristics
PUP.50OnRed.AwesomeApps (M)
16.2.7.9

Sophos
AppRider
4.98

SUPERAntiSpyware
PUP.CrossRider/Variant
9338

Trend Micro House Call
ADW_CROSSID
7.2.38

Trend Micro
TROJ_GEN.R0C1C0OJI14
10.465.07

VIPRE Antivirus
GamePlayLabs
25042

File size:
602.9 KB (617,344 bytes)

Product version:
1.1.151.37

Copyright:
Copyright 2011

Original file name:
Savings Sidekick.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\savings sidekick\savings sidekick.dll

Digital Signature
Signed by:
Awesome Apps

Authority:
Thawte, Inc.

Valid from:
8/28/2012 7:00:00 PM

Valid to:
8/29/2013 6:59:59 PM

Subject:
CN=Awesome Apps, O=Awesome Apps, L=Philadelphia, S=Pennsylvania, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3D0C9CCF6A7D44B9FDA1963A424319BA

File PE Metadata
Compilation timestamp:
10/25/2012 8:22:39 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:1oJru/bPsxxzmst476G/v/hl9SNOlxe7C3y6Pa3SKZE9ml1+E:8u/bPsxxzni6w/xSYL5yyCSsEUQE

Entry address:
0x3B78E

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 96, 9A, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 85, C0, 74, 12, 83, E8, 08, 81, 38, DD, DD, 00, 00, 75, 07, 50, E8, 55, C2, FF, FF, 59, 5D, C3, 8B, FF, 55, 8B, EC, 83, EC, 10, A1, E0, 7D, 08, 10, 33, C5, 89, 45, FC, 8B, 55, 18, 53, 33, DB, 56, 57, 3B, D3, 7E, 1F, 8B, 45, 14, 8B, CA, 49, 38, 18, 74, 08, 40, 3B, CB, 75, F6, 83, C9, FF, 8B, C2, 2B, C1, 48, 3B, C2, 7D, 01, 40, 89, 45, 18...
 
[+]

Entropy:
6.5992

Code size:
421 KB (431,104 bytes)

Internet Explorer BHO
Display name:
CrossriderApp0005060

CLSID:
{11111111-1111-1111-1111-110011501160}

CLSID name:
Savings Sidekick


The file Savings Sidekick.dll has been discovered within the following program.

Savings Sidekick  by 215 Apps
Savings Sidekick from 215 Apps (Amazing Apps) installs a web browser extension (Internet Explorer Browser Helper Object) to view web pages loaded and looks for affiliated merchants in order to possibly provide better pricing or alternative deals on a given product or merchant.
www.50onred.com
80% remove it
 
Powered by Should I Remove It?

Remove Savings Sidekick.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.