Savingsbull

Publisher Information

Savingsbull is a software developer located in Sarasota, Florida in the United States*. The company is a primary distributor of unwanted software.
Remove Savingsbull Malware - Powered by Reason Core Security
Authority:
GoDaddy.com, Inc.

Valid from:
1/16/2014 8:47:15 PM

Valid to:
1/16/2015 8:47:15 PM

Subject:
CN=Savingsbull, O=Savingsbull, L=Sarasota, S=Florida, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
0428c93a073e5e

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Service.Savingsbull.V, PUP.Savingsbull.V, PUP.Savingsbull.R, PUP.Savingsbull.H, PUP.Savingsbull.L, PUP.Savingsbull.N, PUP.Savingsbull.z, PUP.Savingsbull.CC, PUP.Adpeak.Savingsbull.Installer (M), PUP.Adpeak.Savingsbull (M)
100.00%

Malwarebytes
PUP.Optional.Savingsbull
67.86%

Trend Micro House Call
TROJ_GE.275FE3D3, TROJ_GE.21F04DFD, TROJ_GEN.F47V0212, TROJ_GE.269D89E4, TROJ_GEN.F47V0305, TROJ_GEN.F47V0221, TROJ_GEN.F47V0217
67.86%

ESET NOD32
Win64/Adware.Adpeak (variant), Win32/AdWare.Adpeak (variant)
64.29%

MicroWorld eScan
Adware.Agent.NXR
57.14%

nProtect
Adware.Adpeak.K, Adware.Agent.NXR
57.14%

McAfee
Artemis!C5970CEB6125, Artemis!19EEBAFA967B, Artemis!AB95106E9286, Artemis!6D7F8FB0443C, Artemis!2097F52E2271, Artemis!262A578D7745
57.14%

Agnitum Outpost
PUA.Adpeak
57.14%

avast!
BullSave-B [Adw], Win32:BHO-ALX [Trj], NSIS:BullSave-B [Adw]
57.14%

Bitdefender
Adware.Agent.NXR
57.14%

1 / 68      (Adware)
air2603.exe  (a46cd56ab54ddfc6c43b743dbf5372ed)

1 / 68      (Adware)
t.msi  (5c8e2157333e1e6a2a5e24da0bbb4091)

1 / 68      (Adware)
installfilter64.msi  (be185270bbd091581d588ac9391a3b81)

1 / 68      (Adware)
customactionuninstall.vir  (9a5fcefc3328e641ac85cec9d1317f2c)

1 / 68      (Adware)
customactioninstall.vir  (2be83980a926ff5ce99ded9abfd82d08)

1 / 68      (Adware)
installfilter64.msi  (3af7b8083fdd852a6dda4ffe10fc6044)

33 / 68    (Adware)
savingsbull_setup.exe  (096918828503794f0a9afd0ce257f213)

33 / 68    (Adware)
7db584994bc6d9e34a2205b920380113.exe  (7db584994bc6d9e34a2205b920380113)

26 / 68    (Adware)
savingbulls_2901_en-b5d7e360.exe  (a1ac834e403b997915af8c65d5f9ee32)

24 / 68    (Adware)
w3i_savingsbull_58ea3283-ebee-43e4-9b29-44c6e16c6b48.exe  (1da8521c24728771710227bbbe9be828)

26 / 68    (Adware)

47 / 68    (Adware)
savingsbull_e2a6382b-f9ae-4e06-b7cd-dc54d3298d15.exe  (f5eb91320f5ea6b7d35b77c4a372199c)

22 / 68    (Adware)

29 / 68    (Adware)
down.4268.savingsbullde_setup.exe  (b3892884800cd03006849dd2ab230d26)

27 / 68    (Adware)
savingsbull_2182014.exe  (262a578d77453746049978d7d222dfd0)

25 / 68    (Adware)

27 / 68    (Adware)
saving_0502_de-ec0a3c6d.exe  (c5970ceb6125c9a27a82fb46acb933c3)

23 / 68    (Adware)
savingsbull_2102-9a9fd283.exe  (6d7f8fb0443c7838fef8f44dd4bb65f6)

26 / 68    (Adware)
tuguu_savingsbull.exe  (ab95106e92862e6d89c6e2ea7212a166)

19 / 68    (Adware)
saving_0502_usa-8d4ed69f.exe  (188817ee6abfe59f2021fd84c18f0662)

2 / 68      (Adware)
ieoptimizer64.dll  (adef28c00c39962d8d10529290b5af43)

1 / 68      (Adware)
ieoptimizer.dll  (4b2637d1d05b95a25406b949d9d9d49d)

4 / 68      (Adware)
air6e3a.exe  (8c1f2008c4756275e8589a1cf7f9eae8)

3 / 68      (Adware)
copy1-savingsbull0211.exe  (fca390e3517de4ceed5aa14d4d45fea1)

3 / 68      (Adware)
savingsbull_install.exe  (2193be8908d6d055b5bc1c0625e7ce51)

29 / 68    (Adware)
tuguu_savingsbull.exe  (0d5075e128dcb49c78a77535d36823a9)

2 / 68      (Adware)
levelqualitywatcher32.exe  (19eebafa967b14d8d137c38da40fa35d)

4 / 68      (Adware)
levelqualitywatcher64.exe  (9b1e1e505b29a8f4324854da9561fbff)

Downloads URLs for files signed by Savingsbull.

3 / 68      (Adware)
http://www.savingsbull.com/savingsbull_install.exe  (2193be8908d6d055b5bc1c0625e7ce51)

The following websites host and distribute files published by Savingsbull.

The following publishers (by Authenticode signature organization name) are related.

Remove Savingsbull Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Savingsbull by GoDaddy.com, Inc. on January 16, 2014 with the serial number '0428c93a073e5e'.