SavingsHound
SavingsHound appears as a sidebar on the webpage when you search for different traveling options on savingshound.com. The SavingsHound tracks web activity. Communicates with host server and displays travel related popup ads.0
General information:
| Malware Name: |
SavingsHound |
| Malware Type: |
Browser Helper Object |
| Company Name: |
SavingsHound, Inc. |
| Company URL: |
http://www.savingshound.com
|
| Threat Level: |
High |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through web. |
| Operation: |
Time of After Installation. |
Company Description:
SavingsHound is a free software application that compares the Web's best travel deals for user. When user select their offer we connect you directly to travel suppliers with trusted names to book your travel.
Spyware Description:
SavingsHound appears as a sidebar on the webpage when you search for different traveling options on savingshound.com. The SavingsHound tracks web activity. Communicates with host server and displays travel related popup ads.0
Characteristics/Symptoms:
-> Tracks users browsing activity -> Changes settings -> Slows the browser -> Show travel related popup ads -> Create cookies -> Communicate with the host server0
Additional information might be found here:
Processes Running:
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\SavingsHound\hotlist.dat |
2 |
DAT |
| C:\WINDOWS\Downloaded Program Files\SAVINGSHOUND.INF |
16 |
INF |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\SavingsHound\ |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{56352D61-C28C-4E43-8280-38AFFF4F4C50} |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SavingsHound |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavingsHound |
|
