• Welcome Visitor! Please take a few seconds and Register for our forum. Even if you don't want to post, you can still 'Like' and react to posts.

Savingsbull

Ozwynn

Well-Known Member
Joined
Aug 6, 2007
Messages
6,438
Reaction score
113
Points
63
Age
45
Location
Enumclaw WA
Vehicle Year
2014, 1984,1990
Make / Model
Dodge, Honda, F
Engine Size
2.4L, 1100cc, 5.0l
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
It took me 2 hours to get rid of this. I finally did it by going into the task manager, finding savingsbull in the background applications, right click, file location, and then delete savingsbull.

this was after uninstalling it, and downloading a program with a powerful uninstaller and shredding the files and registry entries and removing it from IE and chrome. it needs to be removed from any browser you have installed, in win8 and 8.1 IE is a built in function so it cant be uninstalled, so this extension needs to be removed.

If you have savingsbull you probably also have search conduit so that also needs to be disabled and uninstalled.

Not sure where I got it because I have not downloaded anything since my notebook was new, but it started last night and it was redirecting every click of the mouse.


Savingsbull is persistent and hooks deep into the registry. it needs to be removed from several locations.
 


Rock Auto 5% Discount Code: BD8D9A3814E19D Expires July 5th, 2022

Mark_88

New Member
Joined
Aug 11, 2007
Messages
18,550
Reaction score
228
Points
0
Age
66
Location
Ontario, Canada
Vehicle Year
2007
Make / Model
Dordge
Engine Size
3.3 Fuel Injected
Transmission
Automatic
My credo
Love Thy Neighbor
I've used the task mangler for finding files of apps...I've even hacked the registry a few times to get rid of things but it can be a bit intimidating...always back up the registry before you or any applications repair it...I think the apps do it automatically, but it's always nice to have a copy of it on your desktop in case the system gets wonky.
 

SenorNoob

Well-Known Member
TRS Event Participant
Joined
Oct 24, 2012
Messages
1,967
Reaction score
159
Points
63
Location
Middle Tennessee
Vehicle Year
1988
Make / Model
Ford
Engine Type
4.0 V6
Engine Size
4.0
Transmission
Manual
2WD / 4WD
4WD
Total Lift
1.5" Front + 4" Rear
Tire Size
245-70-R16
For future reference. Sometimes even with an administrator account some files can't be erased in windows for whatever reason. When it comes to these, use a linux live-cd and delete the file that way. Saved my ass more than a few times.
 

Ozwynn

Well-Known Member
Joined
Aug 6, 2007
Messages
6,438
Reaction score
113
Points
63
Age
45
Location
Enumclaw WA
Vehicle Year
2014, 1984,1990
Make / Model
Dodge, Honda, F
Engine Size
2.4L, 1100cc, 5.0l
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
that would work if I had a cd drive or even a hard drive. this happened on my windows tablet which runs windows 8.1

maybe I could put linux live on a micro SD card.
 

alwaysFlOoReD

Forum Staff Member
Forum Moderator
TRS Banner 2012-2015
TRS 20th Anniversary
Joined
Apr 13, 2009
Messages
11,975
Reaction score
2,887
Points
113
Location
Calgary, Canada
Vehicle Year
'91, '80, '06
Make / Model
Ford, GMC,Dodge
Engine Size
4.0,4.0,5.7
Transmission
Manual
2WD / 4WD
4WD
Forgive my lack of knowledge, what does savingsbull do?
 

RonD

Well-Known Member
Joined
Jun 2, 2012
Messages
21,782
Reaction score
5,171
Points
113
Location
canada
Vehicle Year
1994
Make / Model
Ford
Transmission
Manual
Savingsbull is considered "adware", but some would say a virus and they would be close to right, lol.

It is often loaded when you accept free software or shareware downloads, always read and uncheck any "ad-ons" and always select "custom install", this will take longer but you will then be able to uncheck the "automatic install" ad-on stuff.

Once adware like this is accepted, and you do have to accept it, it will immediately try to disable any anti-virus or trojan hunters you might have to get rid of it.
It will then put reproduction files in different sub-directories so if you do manage to clean it off it will come back on the next reboot.
Then it starts to take over your search engines and browsers.

What it does for the company that made it, is to redirect the computer user to selected sites selling various products, Savingsbull gets paid for each hit, it gives a cookie to the site so Savingsbull gets the credit for the traffic.

It is a legit program in that you do need to accept it's installation and it is named, so not a hidden virus or trojan.
But..............it is one of those PITA type things you get with free stuff.

If you run any windows versions then you should have a software called RKill on a USB stick, it is a free program.
What it does is to stop all running programs that are not needed for basic windows operation.
It doesn't clean or repair, it just stops everything from running, so you can then clean anything bad from the files.
On the same USB stick have another free software loaded Malwarebytes.
If these are on the computer not a USB stick they will have been disable by Savingsbull or any other questionable software trying to "take over the world", lol.
So they need to be on a separate drive.
I also rename them, Punch for RKill and Judy for Malwarebytes, because as soon as you plug in that drive to infected computer, it will try to "kill" an RKill file.
Run RKill two times
Then install Malwarebytes on the computer and update it, it will take some time.
Then run Malwarebytes scan.

Any anti-virus or other "protection" software that was on the computer will be compromised, so after clean up uninstall those and reinstall fresh versions.
 
Last edited:

alwaysFlOoReD

Forum Staff Member
Forum Moderator
TRS Banner 2012-2015
TRS 20th Anniversary
Joined
Apr 13, 2009
Messages
11,975
Reaction score
2,887
Points
113
Location
Calgary, Canada
Vehicle Year
'91, '80, '06
Make / Model
Ford, GMC,Dodge
Engine Size
4.0,4.0,5.7
Transmission
Manual
2WD / 4WD
4WD
^^^ Thanks.
 

Ozwynn

Well-Known Member
Joined
Aug 6, 2007
Messages
6,438
Reaction score
113
Points
63
Age
45
Location
Enumclaw WA
Vehicle Year
2014, 1984,1990
Make / Model
Dodge, Honda, F
Engine Size
2.4L, 1100cc, 5.0l
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
thats very useful. thank Ron. I figured out what happened. My 14 y/o downloaded a tube downloader for youtube videos. then uninstalled it before he got caught.
 

adsm08

Senior Master Grease Monkey
Supporting Member
Article Contributor
Ford Technician
TRS 20th Anniversary
Joined
Sep 20, 2009
Messages
34,623
Reaction score
3,578
Points
113
Location
Dillsburg PA
Vehicle Year
1987
Make / Model
Ford
Engine Type
4.0 V6
Engine Size
4.0
Transmission
Manual
2WD / 4WD
4WD
Tire Size
31X10.50X15
If he has an actual need to save videos off Youtube get ClipGrab. I haven't had any issues with adware or spyware since I installed it.
 

Ozwynn

Well-Known Member
Joined
Aug 6, 2007
Messages
6,438
Reaction score
113
Points
63
Age
45
Location
Enumclaw WA
Vehicle Year
2014, 1984,1990
Make / Model
Dodge, Honda, F
Engine Size
2.4L, 1100cc, 5.0l
Transmission
Manual
My credo
If you can't go through it or around it, then go over it.
he is not allowed to use my tablet anymore.....
 

KnockKnock

New Member
U.S. Military - Veteran
Joined
Feb 21, 2014
Messages
104
Reaction score
2
Points
0
Location
CenTex
Vehicle Year
2004
Make / Model
Ford
Engine Size
2.3
Transmission
Manual
that would work if I had a cd drive or even a hard drive. this happened on my windows tablet which runs windows 8.1

maybe I could put linux live on a micro SD card.
Not sure if it works on a SD, but for those looking to run Linux from a live USB, try YUMI, as it's also good for loading all kinds of other OS's from USB.
 

Mark_88

New Member
Joined
Aug 11, 2007
Messages
18,550
Reaction score
228
Points
0
Age
66
Location
Ontario, Canada
Vehicle Year
2007
Make / Model
Dordge
Engine Size
3.3 Fuel Injected
Transmission
Automatic
My credo
Love Thy Neighbor
he is not allowed to use my tablet anymore.....
Best anti-virus around...keep the kids and others away from your computers/tablets et al :)
 

Sponsored Ad


Sponsored Ad

Top