84,488,480 programs installed

Should I remove savoensharee?

What percent of users and experts removed it?
85% remove it15% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Reach <0.001%

Versions

VersionDistribution
2.3.0.1859 100.00%

savoensharee

What is savoensharee?

Save N Share is an adware extension that plugs into the user's web browser for IE, Chrome and Firefox and will display additional advertisements in search engines such as Bing and Google. It installs itself as a browser extension/toolbar and runs as a background process. Once installed, it displays ads by injecting new ads in search as well as various web pages that use 3rd party advertising and replaces these ads with its own. It also constantly will display pop-up ads when the user is doing various activities such as watching a video or viewing a specific shopping web site.

The program users the InstalleRex download manager from WebPicks Holdings to install itself on the user's PC. InstalleRex is known for distributing potentially unwanted applications including web browser toolbars and various ad-supported extensions. The software is a variant of a known adware all with names for shopping, saving or coupons, but is re-branded to mask its origination although is includes all of the same components.

Overview

It adds a Browser Helper Object (BHO) to Internet Explorer. The main program executable is 8piA8Pvn1.exe. Typically most users end up uninstalling this just after a few days. The setup package is about 737.87 KB (755,576 bytes) when donwloaded.
  • Possible malware installed by this program
  • Loads into the web browser
  • Typically distributed through a pay-per-install bundle
  • Injects advertisements unassociated with the underlying web page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in savoensharee.
8piA8Pvn1.exe (8300c91b40229b42301aebc6d8859907) has been flagged by the following 14 scanners:
Anti-Virus softwareVersionDetection
AVG 2014.0.3598 Skodna.Generic
Clam AntiVirus 0.98/18155 win.Adware.Saveshare-3
Comodo Security 17142 Application.Win32.Agent.~AVL
Dr.Web 9.0.0.0295 Trojan.Crossrider.3
IKARUS anti.virus t3scan.2.0.127 Win32.SuspectCrc
Kingsoft AntiVirus 331020.49267 Win32.Troj.Plugie.a.(kcloud)
Malwarebytes v2013.10.22.04 PUP.Optional.MultiPlug.A
Norman 10.20131022 Suspicious_Gen4.FCNHT
Panda Antivirus 13.10.22.04 Adware/SaveShare
Rising Antivirus 23.00.65.131020 Trojan.Win32.Plugie.a
Sophos 4.93 MultiPlug
Trend Micro 10.465.22 ADW_SAVESHARE
TrendMicro-HouseCall 7.2.295 ADW_SAVESHARE
VIPRE Antivirus 22620 JustPlugIt (fs)
zs3W6cVy.dll (e9b27306a18f18b88945cdf066de2fc9) has been flagged by the following 13 scanners:
Anti-Virus softwareSoftware versionDetection
avast! 8.0.1489.320 Win32:BHO-AML [Spy]
AVG 13.0.0.3169 Generic5.AFXS
Bkav FE 1.3.0.4246 HW32.Laneul.tesi
Comodo Security 16996 ApplicUnwnt
Dr.Web Trojan.Crossrider.3
ESET-NOD32 8840 a variant of Win32/Adware.MultiPlug.I
K7 AntiVirus 9.172.9682 Riskware
K7GW 12.7.0.14 Riskware
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug.A
McAfee 5.600.0.1067 Artemis!E9B27306A18F
McAfee-GW-Edition 2013 Artemis!E9B27306A18F
VIPRE Antivirus 21806 Trojan.Win32.Generic!BT
       View all 27 all detections
savoensharee has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: savEnsheareu
URL: 34stateshare.com
Installation folder: C:\ProgramData\savoensharee
Uninstaller: "C:\ProgramData\savoensharee\8piA8Pvn1.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
Estimated size: 737.87 KB

Program filesFiles installed by savoensharee

Program executable:8piA8Pvn1.exe (Malware detected)
Path:C:\ProgramData\savoensharee\8piA8Pvn1.exe
MD5:8300c91b40229b42301aebc6d8859907
Additional files:
  • (Malware detected) 8piA8Pvn1.exe (by Setup)
  • (Malware detected) zs3W6cVy.dll

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • zs3W6cVy.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'SearchNewTab' with the class of {885D1CB3-872A-D62A-A2D7-EC7C7E3B2174}.

How do I remove savoensharee?

You can uninstall savoensharee from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program savoensharee, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove savoensharee.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by savoensharee you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

USER ACTIONS
Uninstall it 85%
Keep it 15%
 
MOST USED OS
~99%
Windows 7 (SP1)
 
COUNTRY POPULARITY
100.00%
United States

Distribution by countryGeography

100.00% of installs come from the United States
Which countries install it?
  United States 100.00%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.