{"id":747,"date":"2014-06-03T06:34:07","date_gmt":"2014-06-03T06:34:07","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=747"},"modified":"2018-05-29T12:02:52","modified_gmt":"2018-05-29T12:02:52","slug":"remove-saveon-so-booster-so-sustainer-1-80","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/remove-saveon-so-booster-so-sustainer-1-80\/","title":{"rendered":"Save On, SO.Booster and SO.Sustainer 1.80 – Removal Instructions"},"content":{"rendered":"

Found a few new variants of SaveNet<\/a>\u00a0this morning. The new variant appear as\u00a0Save On<\/strong>, SO.Booster<\/strong> and SO.Sustainer 1.80<\/strong> in the Add\/Remove programs dialog. These where found in a camera related software, and the setup file was digitally signed by Daneil Jemoch<\/a>. Save On inserts ad links while you browse. The links are underlined with a green small arrow and are labeled “Click to Continue > by save on<\/strong>” as shown in the screenshot below:<\/p>\n

\"Click<\/a><\/p>\n

These are the detection results from VirusTotal<\/a> for SO.Booster.exe<\/a>:<\/p>\n

\"so.booster.exe<\/a><\/p>\n

If you have\u00a0Save On<\/strong>, SO.Booster<\/strong> and SO.Sustainer 1.80<\/strong> on your machine, you may have noticed a file called SO.Booster.exe<\/a> or SO;Booster.exe<\/a> running on your computer at startup or that new add-ons have appeared in your browser. Here’s a screenshot from Firefox that shows the SaveOn<\/strong> add-on:<\/p>\n

\"save<\/a><\/p>\n

The removal is pretty straightforward with the FreeFixer<\/a> removal tool. Simply check the SaveOn<\/strong>, SO.Booster<\/strong> and SO.Sustainer<\/strong> files, as shown in the screenshots:<\/p>\n

\"so.booster.exe<\/a> \"save-on<\/a> \"so.booster.exe<\/a> \"SaveOn<\/a> \"save-on-internet-explorer\"<\/a><\/p>\n

How did you get SaveOn<\/strong> on your machine?<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Found a few new variants of SaveNet\u00a0this morning. The new variant appear as\u00a0Save On, SO.Booster and SO.Sustainer 1.80 in the Add\/Remove programs dialog. These where found in a camera related software, and the setup file was digitally signed by Daneil Jemoch. Save On inserts ad links while you browse. The links are underlined with a … Continue reading Save On, SO.Booster and SO.Sustainer 1.80 – Removal Instructions<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/747"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=747"}],"version-history":[{"count":8,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/747\/revisions"}],"predecessor-version":[{"id":2747,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/747\/revisions\/2747"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=747"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=747"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=747"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}