Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Relationships
savings explorer-bho.dll
Savings Explorer by Innovative Apps (Signed)
| Version: | 1.1.153.54 |
| MD5: | 5601945c614a6e1ee3e85304f1851174 |
| SHA1: | ba70d900b9afbf0ce4d0790652d0e650cd1b1b45 |
| SHA256: | 0ccd38e0e107621e37accaafdfb32937151a9a9957c0592d4f8ed16d437edbfb |
Warning 7 antivirus scanners has detected malware.
Overview
savings explorer-bho.dll is malware that is loaded as dynamic link library that runs in the context of Internet Explorer. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. This is typically installed with the program Savings Explorer published by 215 Apps and is most likely removed by most users once installed (83% removed). The file is digitally signed by Innovative Apps which was issued by the Thawte certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).
Details
| File name: | savings explorer-bho.dll |
| Publisher: | Innovative Apps |
| Product name: | Savings Explorer |
| Description: | Savings Explorer BHO |
| Typical file path: | C:\Program Files\savings explorer\savings explorer-bho.dll |
| Original name: | Savings Explorer.dll |
| File version: | 1.1.153.54 |
| Size: | 734.38 KB (752,008 bytes) |
| Build date: | 6/10/2013 8:06 AM |
| Certificate |
| Issued to: | Innovative Apps |
| Authority (CA): | Thawte |
| Effective date: | Tuesday, January 8, 2013 |
| Expiration date: | Thursday, January 9, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Savings Explorer by 215 Apps installs a web browser plugin that displays coupon deals and other advertisements when users visit various online shopping sites. When a user visits an online shopping site and the program has a pre-arranged affiliate relationship with a similar merchant it will alert the user that other deals or prices exist, or in many cases just shows adverts. It injects ads and affiliate codes in product links directly b...
Behaviors
Internet Explorer Browser Helper Object
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'
- BHO CLSID: {11111111-1111-1111-1111-110211101158}
Malware detections
Based on 40+ industry antivirus scanners, 7 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| avast! |
8.0.1489.320 |
Win32:Installer-M [Adw] |
| Dr.Web |
8.13.11.25 |
Trojan.Crossrider.1 |
| ESET NOD32 |
7.8943 |
a variant of Win32/Toolbar.CrossRider.H |
| G Data |
13.11.22 |
Win32.Trojan.Agent.C06T08 |
| K7 AntiVirus |
9.173.9916 |
Riskware |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0706 |
| VIPRE Antivirus |
22590 |
GamePlayLabs (v) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
100.00% |
|
