BrowserModifier:Win32/BSaving

BrowserModifier:Win32/BSaving is a browser helper object (BHO) that monitors the data you input into a browser, and sends this information to a remote server.

This program may redirect browser traffic (such as search queries and website visits) without your knowledge.

Installation

BrowserModifier:Win32/BSaving creates the following files on your computer:

• %ProgramFiles%\bSaving
• %ProgramFiles%\bSaving\7e872ee05f4e7d624a73ecedd6b62867.dll
• %ProgramFiles%\bSaving\uninst.exe

As part of its installation, it creates the following registry entries, so that it starts each time you open you browser:

In subkey: HKLM\SOFTWARE\Classes\CLSID\{GUID}
Sets value: "@"
With data: "bSaving"

In subkey: HKLM\SOFTWARE\Classes\CLSID\{GUID}\InProcServer32    
Sets value: "@"
With data: "C:\Program Files\bSaving\7e872ee05f4e7d624a73ecedd6b62867.dll"
Sets value: "ThreadingModel"
With data: "Apartment"

The BHO can be seen in the Manage Add-ons window, as in the screenshot below:

Analysis by Ferdinand Plazo