• Welcome Visitor! Please take a few seconds and Register for our forum. Even if you don't want to post, you can still 'Like' and react to posts.

Savingsbull


Ozwynn

Well-Known Member
U.S. Military - Veteran
Joined
Aug 6, 2007
Messages
6,505
Reaction score
200
Points
63
Age
47
Location
Berrien Springs, MI
Vehicle Year
2022
Make / Model
RE Interceptor
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
It took me 2 hours to get rid of this. I finally did it by going into the task manager, finding savingsbull in the background applications, right click, file location, and then delete savingsbull.

this was after uninstalling it, and downloading a program with a powerful uninstaller and shredding the files and registry entries and removing it from IE and chrome. it needs to be removed from any browser you have installed, in win8 and 8.1 IE is a built in function so it cant be uninstalled, so this extension needs to be removed.

If you have savingsbull you probably also have search conduit so that also needs to be disabled and uninstalled.

Not sure where I got it because I have not downloaded anything since my notebook was new, but it started last night and it was redirecting every click of the mouse.


Savingsbull is persistent and hooks deep into the registry. it needs to be removed from several locations.
 


Mark_88

Well-Known Member
Joined
Aug 11, 2007
Messages
18,554
Reaction score
240
Points
63
Age
68
Location
Ontario, Canada
Vehicle Year
2007
Make / Model
Dordge
Engine Size
3.3 Fuel Injected
Transmission
Automatic
My credo
Love Thy Neighbor
I've used the task mangler for finding files of apps...I've even hacked the registry a few times to get rid of things but it can be a bit intimidating...always back up the registry before you or any applications repair it...I think the apps do it automatically, but it's always nice to have a copy of it on your desktop in case the system gets wonky.
 

SenorNoob

Well-Known Member
TRS Event Participant
Joined
Oct 24, 2012
Messages
2,348
Reaction score
520
Points
113
Location
Middle Tennessee
Vehicle Year
1988
Make / Model
Ford
Engine Type
4.0 V6
Engine Size
4.0
Transmission
Manual
2WD / 4WD
4WD
Total Lift
1.5" Front + 4" Rear
Tire Size
245-70-R16
For future reference. Sometimes even with an administrator account some files can't be erased in windows for whatever reason. When it comes to these, use a linux live-cd and delete the file that way. Saved my ass more than a few times.
 

Ozwynn

Well-Known Member
U.S. Military - Veteran
Joined
Aug 6, 2007
Messages
6,505
Reaction score
200
Points
63
Age
47
Location
Berrien Springs, MI
Vehicle Year
2022
Make / Model
RE Interceptor
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
that would work if I had a cd drive or even a hard drive. this happened on my windows tablet which runs windows 8.1

maybe I could put linux live on a micro SD card.
 

alwaysFlOoReD

Forum Staff Member
TRS Forum Moderator
TRS Banner 2012-2015
TRS 20th Anniversary
Joined
Apr 13, 2009
Messages
13,872
Reaction score
5,031
Points
113
Location
Calgary, Canada
Vehicle Year
'91, '80, '06
Make / Model
Ford, GMC,Dodge
Engine Size
4.0,4.0,5.7
Transmission
Manual
2WD / 4WD
4WD
Forgive my lack of knowledge, what does savingsbull do?
 

RonD

Official TRS AI
TRS Technical Advisor
Joined
Jun 2, 2012
Messages
25,292
Reaction score
8,298
Points
113
Location
canada
Vehicle Year
1994
Make / Model
Ford
Transmission
Manual
Savingsbull is considered "adware", but some would say a virus and they would be close to right, lol.

It is often loaded when you accept free software or shareware downloads, always read and uncheck any "ad-ons" and always select "custom install", this will take longer but you will then be able to uncheck the "automatic install" ad-on stuff.

Once adware like this is accepted, and you do have to accept it, it will immediately try to disable any anti-virus or trojan hunters you might have to get rid of it.
It will then put reproduction files in different sub-directories so if you do manage to clean it off it will come back on the next reboot.
Then it starts to take over your search engines and browsers.

What it does for the company that made it, is to redirect the computer user to selected sites selling various products, Savingsbull gets paid for each hit, it gives a cookie to the site so Savingsbull gets the credit for the traffic.

It is a legit program in that you do need to accept it's installation and it is named, so not a hidden virus or trojan.
But..............it is one of those PITA type things you get with free stuff.

If you run any windows versions then you should have a software called RKill on a USB stick, it is a free program.
What it does is to stop all running programs that are not needed for basic windows operation.
It doesn't clean or repair, it just stops everything from running, so you can then clean anything bad from the files.
On the same USB stick have another free software loaded Malwarebytes.
If these are on the computer not a USB stick they will have been disable by Savingsbull or any other questionable software trying to "take over the world", lol.
So they need to be on a separate drive.
I also rename them, Punch for RKill and Judy for Malwarebytes, because as soon as you plug in that drive to infected computer, it will try to "kill" an RKill file.
Run RKill two times
Then install Malwarebytes on the computer and update it, it will take some time.
Then run Malwarebytes scan.

Any anti-virus or other "protection" software that was on the computer will be compromised, so after clean up uninstall those and reinstall fresh versions.
 
Last edited:

alwaysFlOoReD

Forum Staff Member
TRS Forum Moderator
TRS Banner 2012-2015
TRS 20th Anniversary
Joined
Apr 13, 2009
Messages
13,872
Reaction score
5,031
Points
113
Location
Calgary, Canada
Vehicle Year
'91, '80, '06
Make / Model
Ford, GMC,Dodge
Engine Size
4.0,4.0,5.7
Transmission
Manual
2WD / 4WD
4WD
^^^ Thanks.
 

Ozwynn

Well-Known Member
U.S. Military - Veteran
Joined
Aug 6, 2007
Messages
6,505
Reaction score
200
Points
63
Age
47
Location
Berrien Springs, MI
Vehicle Year
2022
Make / Model
RE Interceptor
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
thats very useful. thank Ron. I figured out what happened. My 14 y/o downloaded a tube downloader for youtube videos. then uninstalled it before he got caught.
 

adsm08

Senior Master Grease Monkey
Supporting Member
Article Contributor
Ford Technician
TRS 20th Anniversary
Joined
Sep 20, 2009
Messages
34,623
Reaction score
3,613
Points
113
Location
Dillsburg PA
Vehicle Year
1987
Make / Model
Ford
Engine Type
4.0 V6
Engine Size
4.0
Transmission
Manual
2WD / 4WD
4WD
Tire Size
31X10.50X15
If he has an actual need to save videos off Youtube get ClipGrab. I haven't had any issues with adware or spyware since I installed it.
 

Ozwynn

Well-Known Member
U.S. Military - Veteran
Joined
Aug 6, 2007
Messages
6,505
Reaction score
200
Points
63
Age
47
Location
Berrien Springs, MI
Vehicle Year
2022
Make / Model
RE Interceptor
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
he is not allowed to use my tablet anymore.....
 

KnockKnock

New Member
U.S. Military - Veteran
Joined
Feb 21, 2014
Messages
104
Reaction score
2
Points
0
Location
CenTex
Vehicle Year
2004
Make / Model
Ford
Engine Size
2.3
Transmission
Manual
that would work if I had a cd drive or even a hard drive. this happened on my windows tablet which runs windows 8.1

maybe I could put linux live on a micro SD card.
Not sure if it works on a SD, but for those looking to run Linux from a live USB, try YUMI, as it's also good for loading all kinds of other OS's from USB.
 

Mark_88

Well-Known Member
Joined
Aug 11, 2007
Messages
18,554
Reaction score
240
Points
63
Age
68
Location
Ontario, Canada
Vehicle Year
2007
Make / Model
Dordge
Engine Size
3.3 Fuel Injected
Transmission
Automatic
My credo
Love Thy Neighbor
he is not allowed to use my tablet anymore.....
Best anti-virus around...keep the kids and others away from your computers/tablets et al :)
 

Sponsored Ad


Sponsored Ad

Staff online

Today's birthdays

Member & Vendor Upgrades

For a small yearly donation, you can support this forum and receive a 'Supporting Member' banner, or become a 'Supporting Vendor' and promote your products here. Click the banner to find out how.

Latest posts

Truck of The Month


Kirby N.
March Truck of The Month

Recently Featured

Want to see your truck here? Share your photos and details in the forum.

Follow TRS On Instagram

TRS Events

25th Anniversary Sponsors

Check Out The TRS Store


Sponsored Ad


Sponsored Ad

Sponsored Ad


Amazon Deals

Top