Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Additional versions

1.1.151.35	20.00%
1.1.151.35	80.00%

(Note, Awesome Apps publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

savingsapp.dll (SavingsApp by Awesome Apps)

savingsapp-bg.exe

SavingsApp by Awesome Apps (Signed)

Remove savingsapp-bg.exe

Version:	1.1.151.35
MD5:	af078ed5127de61e4b008367e28f0582
SHA1:	df858f6af0b5c66ffc311f9161cf21c27d03b7c0
SHA256:	3b84ab1359fde982a435f6d516ebf553eb008be12ebbe56839525a327cc6e3ce

Warning 10 antivirus scanners has detected malware.

What is savingsapp-bg.exe?

savingsapp-bg.exe, SavingsApp exe is a background process that interacts with the SavingsApp BHO to monitor web browsing behaviors in Internet Explorer. SavingsApp is an adware type program that has causes serious performance issues to your PC by installing a number of plug-ins and add-ins to your web browser and Windows. It injects ads directly by modifying web pages based on your surfing habits.

About savingsapp-bg.exe (from Awesome Apps)

“SavingsApp is a web tool that lists deals to help you save on retail sites while you shop. We provide a list of deals that you can access at anytime while shopping, allowing you to avoid having to mak”

Details

File name:	savingsapp-bg.exe
Publisher:	215 Apps
Product name:	SavingsApp
Description:	SavingsApp exe
Typical file path:	C:\Program Files\savingsapp\savingsapp-bg.exe
Original name:	SavingsApp.exe
File version:	1.1.151.35
Size:	886.38 KB (907,648 bytes)
Certificate
Issued to:	Awesome Apps
Authority (CA):	Thawte
Effective date:	Tuesday, August 28, 2012
Expiration date:	Thursday, August 29, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

SavingsApp

215 Apps

86% remove

215 SavingsApp (by 50onRed) is a web browser plugin that displays coupon deals and other advertisements when users visit various online shopping sites. When a user visits an online shopping site and the program has a pre-arranged affiliate relationship with a similar merchant it will alert the user that other deals or prices exist, or in many cases just shows adverts. It injects ads and affiliate codes in product links directly by modif...

Network connections

[UDP] listens on port 57971

[UDP] listens on port 54566

[UDP] listens on port 59872

[UDP] listens on port 59061

Malware detections

Based on 40+ industry antivirus scanners, 10 of them detected the following malware.

Antivirus engine	Engine version	Detection
AVG	2014.0.3629	Suspicion: unknown virus
Dr.Web	7.0.4.09250	Adware.Plugin.14
Kingsoft	2012.12.21.213	Win32.Troj.Agent.tq.(kcloud)
Malwarebytes	1.62.0.140	PUP.CrossFire.SA
nProtect	2013-01-09.01	Trojan/W32.Agent.907648.B
Symantec	20121.2.1.2	WS.Reputation.1
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.F47V0926
Vba32 AntiVirus	3.12.18.4	Trojan.Agent.aidw
VIPRE Antivirus	14940	GamePlayLabs (v)
ViRobot	2011.4.7.4223	Trojan.Win32.A.Agent.907648

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.09036886%	0.028634%
Kernel CPU:	0.03655180%	0.013761%
User CPU:	0.05381706%	0.014873%
Kernel CPU time:	7,373 ms/min	100,923,805ms/min
Context switches:	7/sec	284/sec
Memory
Private memory:	6.14 MB	21.59 MB
Private (maximum):	5.15 MB
Private (minimum):	4.63 MB
Non-paged memory:	6.14 MB	21.59 MB
Virtual memory:	76.27 MB	140.96 MB
Virtual memory (peak):	81.95 MB	169.69 MB
Working set:	4.56 MB	18.61 MB
Working set (peak):	14.68 MB	37.95 MB
Resource allocations
Threads:	7	12
Handles:	241	600
GUI GDI count:	9	103
GUI GDI peak:	11	142
GUI USER count:	6	49
GUI USER peak:	8	71

Process properties

Integrety level:	Low
Platform:	32-bit
Command line:	"C:\Program Files\savingsapp\savingsapp-bg.exe" /createbg
Owner:	User
Parent process:	iexplore.exe (by Microsoft)

Threads