Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Additional versions
Relationships
solid savings-bho.dll
Solid Savings by Innovative Apps (Signed)
| Version: | 1.1.153.9 |
| MD5: | f0c24ecc6070303905bd2df6716bf7da |
| SHA1: | f37d47bda15e480aa0ce44b799cc49cd0d23e29d |
| SHA256: | 51f96c76cda97f83e75ac9378a52b1bca1e38e14d20674ccbc594c1c559cd4f4 |
Warning 7 antivirus scanners has detected malware.
Overview
solid savings-bho.dll is malware that is loaded as dynamic link library that runs in the context of Internet Explorer. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. This is typically installed with the program Solid Savings published by 215 Apps and is most likely removed by most users once installed (79% removed). The file is digitally signed by Innovative Apps which was issued by the Thawte certificate authority (CA).
Details
| File name: | solid savings-bho.dll |
| Publisher: | Innovative Apps |
| Product name: | Solid Savings |
| Description: | Solid Savings BHO |
| Typical file path: | C:\Program Files\solid savings\solid savings-bho.dll |
| Original name: | Solid Savings.dll |
| File version: | 1.1.153.9 |
| Size: | 724.88 KB (742,280 bytes) |
| Build date: | 4/25/2013 4:22 AM |
| Certificate |
| Issued to: | Innovative Apps |
| Authority (CA): | Thawte |
| Effective date: | Sunday, September 1, 2013 |
| Expiration date: | Monday, September 1, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Innovative Apps' Solid Savings is a web browser plugin that displays coupon deals and other advertisements when users visit various online shopping sites. When a user visits an online shopping site and the program has a pre-arranged affiliate relationship with a similar merchant it will alert the user that other deals or prices exist, or in many cases just shows adverts. It injects ads and affiliate codes in product links directly by mo...
Behaviors
Internet Explorer Browser Helper Object
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'
- BHO CLSID: {11111111-1111-1111-1111-110211621178}
Malware detections
Based on 40+ industry antivirus scanners, 7 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| avast! |
8.0.1489.320 |
Win32:Installer-M [Adw] |
| Dr.Web |
8.13.9.30 |
Adware.Plugin.73 |
| ESET NOD32 |
7.8557 |
probably a variant of Win32/Toolbar.CrossRider.A |
| McAfee |
5.400.1158 |
Artemis!F0C24ECC6070 |
| McAfee Gateway Anti-Malware |
v2013-dat |
Artemis!F0C24ECC6070 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0430 |
| VIPRE Antivirus |
19510 |
GamePlayLabs (v) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
50.00% |
|
| Windows 8 |
50.00% |
|
Distribution by country
Canada installs about 50.00% of Solid Savings.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
66.67% |
|
| Acer |
33.33% |
|
