Savings Sidekick virus is yet another adware infection which gets installed as a plugin and then hijacks browser to display advertisements (SPAM). This corrupt application also steals sensitive user information from the infected computer to help hackers perform their criminal wishes. Actually Savings Sidekick virus is used by Cyber Bandits to collect personal user information and to promote http://SavingsSidekick.com, So the developer of this virus will get paid as the site displays third-party advertisements.
The main source of Savings Sidekick virus infection are freeware programs that bring it, Or some people download Savings Sidekick toolbar extension from the official www.SavingsSidekick.com page. Anyhow, right after getting installed, the malware will modify some settings of the web browser like Firefox, Chrome or Internet Explorer. As soon as it completes its malicious setup, user will notice Savings Sidekick pop-up ads appearing on computer. It might also displays advertisements inside all legit sites such as Facebook, Youtube etc. Instant Uninstall of Savings Sidekick virus is recommended in order to protect your privacy.
What are symptoms and possible risks of adware like Savings Sidekick virus:
Computer infected with Savings Sidekick pop-up virus?
Need not to worry if your PC is infected. An efficient anti-malware program can fix your PC. If you want to remove it manually, please keep in your mind that manual removal is a complicated thing. Moreover this method dose not ensure 100% removal of malware. The best, easy and simple way to get rid of this virus is to install a proper anti-malware tool.
Ordinary uninstall method to Block Pop-ups, Remove Plugin & add-ons:
Here are instructions on how to manually uninstall an unwanted toolbar, add-on, plugin or popup malware from your browser. The ordinary process dose not get you rid of malware programs but it might be helpful in fixing a toolbar application which is annoying but not a virus.
Step 1:
Go to “Control Panel”
Open ADD/REMOVE PROGRAMS or PROGRAMS AND FEATURES
In the list of installed program, find the software you are trying to get rid of, Once found, click UNINSTALL. (Some malicious browser applications may appear as UNKNOWN in this list)
Step 2:
Internet Explorer
Go to INTERNET OPTIONS (Internet Explorer)
click CONNECTIONS tab
Click LAN SETTINGS and make sure no proxy is being used. (All the 3 options should be unchecked as default)
Now click on TOOLS and then click “MANAGE ADD-ONS”
In this window, disable any suspicious TOOLBAR & EXTENSION and also disable any SEARCH PROVIDER you do not trust like Savings Sidekick virus
Now again click on TOOLS and click on POP-UP BLOCKER, then click TURN ON POP-UP BLOCKER. and then go to POP-UP BLOCKER SETTINGS. There you may add any website you wish to block popups from.
Mozilla Firefox:
Click on the TOOLS and then ADD-ONS. From this list, disable/uninstall any suspicious PLUGIN or EXTENSION.
Now click on the drop down arrow just beside the SEARCH BOX which is placed top right corner of Firefox. Then select MANAGE SEARCH ENGINES. And then disable/remove any bad application like Savings Sidekick virus if listed.
Google Chrome:
Click on the drop down arrow just beside the SEARCH BOX which is placed top right corner of Firefox. Then select MANAGE SEARCH ENGINES. And then disable/remove any bad application like Savings Sidekick virus if listed.
Spyware Savings Sidekick Malware. Manual removal instruction:
Please make sure to create backup before getting started.
Stop malicious processes:
Open windows task manager, go to “Processes” tab and stop any Savings Sidekick virus process which is running. It can be stopped by Right click on it and select “End process”.
Remove SavingsSidekick.com virus corrupt registry settings:
Open Windows Registry editor by typing REGEDIT into RUN. Find and delete any keys and values related with this malware. (Please use the name of Malware to search for keys related to it)
Below is a list of possibly infected registry keys:
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\software\classes\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions,
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0
Delete Savings Sidekick virus infected files & folders
Go to My Computer, search for malware files. Delete all the files and folders found. (Please use the name of Malware to search for keys related to it).
Possible locations:
%UserProfile%\
%UserProfile%\Application Data\
%UserProfile%\Start Menu\Programs\
Savings Sidekick pop-up virus removal tools
To remove this virus Automatically, We suggest following softwares:
Malware Bytes Anti-Malwar
Related Articles:
Sendori.exe virus
Mywebface virus
Coupon-Companion virus
LocalPages malware
ShopperReports virus
