84,488,480 programs installed

Should I remove websaVe?

What percent of users and experts removed it?
85% remove it15% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Reach 0.0003%

Versions

VersionDistribution
3.1.0.1002 20.00%
2.2.0.1281 20.00%
2.1.0.1945 20.00%
2.1.0.1195 20.00%
1.3.0.1798 20.00%

websaVe

What is websaVe?

WebSave is a JustPlug.It web browser extension that is delivered via the WebPick InstalleRex download and install manager. In addition to be included with various adware offer bundles, the JustPlug.It cross browser extension runs with multiple parts including a Windows service, an auto-starting component and the browser toolbar/plugin which is designed to inject advertisements in the browser in form of banner ads, hyper-text links and popups. In addition, some version might hijack existing advertising on web sites as well as inject affiliate codes in links as coupon offers. During installation, the program will install itself in a folder with a random name in Program Files or ProgramData and each of the included files will also have a shared random generated name. The Windows Service that is installed runs with full administrator rights under the Services control app and connects to a remote server (toolkitsetbest.info, getapplicationmy.info) for updates as well as creates a server that listens for TCP network requests locally.

The advertisements that are displayed in the browser could include deceptive malvertising ads for 'required' updates of known common programs as well as unwanted pop-ups advertisements. If downloaded these programs install a number of bundled adware utilities and additional browser extensions. Additionally components of the program will modify the browser's default security levels.

A number of the versions may include a setup file signed by WEB PICK - INTERNET HOLDINGS LTD (this is the partner installer/distributor).

About  (from InstalleRex-WebPick)

While you visit your favourite online shopping sites, the browser add-on automatically scans for coupons, deals, and promotions, giving online shoppers the benefit of comparison, and assuring they only purchase what suits their budgets. This tool scans the Web to get the best deals from All Your favorite shopping sites...  Read more
Overview
  • Possible malware installed by this program
  • Typically distributed through a pay-per-install bundle
  • Displays unwanted advertisements
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in websaVe.
BeZmYF2A.exe (ef38514253e4dafb6823f236bc47bb5f) has been flagged by the following 7 scanners:
Anti-Virus softwareVersionDetection
AVG 2015.0.3546 Generic5
Comodo Security 17878 ApplicUnwnt
ESET-NOD32 8.9495 a variant of Win32/AdWare.MultiPlug.S
Malwarebytes v2014.02.13.08 PUP.Optional.MultiPlug.A
Qihoo-360 1.0.0.1015 HEUR/Malware.QVM10.Gen
Trend Micro 10.465.04 ADW_MULTIPLUG
TrendMicro-HouseCall 7.2.63 ADW_MULTIPLUG
gzFUbq9o.exe (c023be37240262b15ac48ab871e2f2b4) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.03.03.00 Trojan/Win32.Dropper
Comodo Security 17876 ApplicUnwnt
ESET-NOD32 9492 a variant of Win32/AdWare.MultiPlug.S
Malwarebytes 1.75.0001 PUP.Optional.MultiPlug.A
Qihoo-360 1.0.0.1015 HEUR/Malware.QVM10.Gen
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0214
ib.exe (815b3303270ea4ce5a226f0e011f1bd5) has been flagged by the following 5 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.03.04.00 Trojan/Win32.Dropper
AVG 13.0.0.3169 Generic5.AOBM
Comodo Security 17878 ApplicUnwnt
ESET-NOD32 9495 a variant of Win32/AdWare.MultiPlug.S
Malwarebytes 1.75.0001 PUP.Optional.MultiPlug.A
       View all 18 all detections
websaVe has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: weebbsave
URL: websavers.info
Installation folder: C:\ProgramData\websave
Uninstaller: "C:\ProgramData\websaVe\BeZmYF2A.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""

Program filesFiles installed by websaVe

Program executable:BeZmYF2A.exe (Malware detected)
Name:system Retrieval cluster
Path:C:\ProgramData\websave\BeZmYF2A.exe
MD5:ef38514253e4dafb6823f236bc47bb5f
Additional files:
  • (Malware detected) 5d7m9kpC6Wg.exe (by system Retrieval cluster) - system Retrieval cluster (often)
  • (Malware detected) BeZmYF2A.exe (by system Retrieval cluster)
  • (Malware detected) yZP1ge.exe
  • (Malware detected) gzFUbq9o.exe (by so management by also) - so management by also (modifying Databases)
  • (Malware detected) ib.exe (by affects) - affects (development fall)

How do I remove websaVe?

You can uninstall websaVe from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program websaVe, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove websaVe.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

OS VERSIONS
Win 10 60%
Win 7 (SP1) 20%
 
USER ACTIONS
Uninstall it 85%
Keep it 15%
 
COUNTRY POPULARITY
57.14%
United States

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 10 60.00%
Windows 7 40.00%
Which OS releases does it run on?
Windows 8.1 Pro 40.00%
Windows 8 20.00%
Windows 7 Home Basic 20.00%
Windows 7 Ultimate 20.00%

Distribution by countryGeography

57.14% of installs come from the United States
Which countries install it?
  United States 57.14%
  Portugal 14.29%
  Indonesia 14.29%
  Turkey 14.29%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
ASUS 60.00%
Dell 20.00%
Lenovo 20.00%
Common models
ASUSTeK K54HR 20.00%
LENOVO IdeaCentre K330 20.00%
Dell Inspiron N5010 20.00%
ASUSTeK K84L 20.00%
ASUSTeK X550CC 20.00%

comments1 comment

user comment
user comment
Joeover a year ago
I'm interested in a list of which software is, secretly or not, installing this adware.