What is HAppy2Save?

HAppy2Save is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows 7 (SP1) with nearly ~99% of installations running this operating system. HAppy2Save's installer is typically 1.00 MB in size and installs around 5 files.

HAppy2Save is most popular in the United States with 80.00% of installations residing in this country.

About HAppy2Save?

Happy2Save is a web browser extension developed by JustPlug.It and distributed via the WebPick (InstalleRex) download and install manager. It is commonly included in adware offer bundles and functions as a cross-browser extension with multiple components, including a Windows service, auto-starting feature, and a browser toolbar/plugin. This extension is designed to inject various forms of advertisements into the browser, such as banner ads, hyper-text links, and pop-ups. Some versions of Happy2Save may also modify existing advertising on websites and insert affiliate codes as coupon offers. Users may encounter deceptive malvertising ads prompting 'required' updates for common programs, as well as unwanted pop-up advertisements. If downloaded, Happy2Save may install bundled adware utilities and additional browser extensions. It also has the capability to modify the browser's default security settings.

Multiple virus scanners have detected malware in HAppy2Save.

2QAQu3yyh.x64.dll (MD5: bab49b61943c026b825a714d2175635a) has been flagged by 20 scanners:

Scanner Software	Version	Result
AhnLab-V3	None	Trojan/Win32.Preloader
Avira AntiVir	7.11.138.26	ADWARE/Adware.Gen
AVG	13.0.0.3169	Generic_r.GX
Baidu-International	3.5.1.41473	Adware.Win64.MultiPlug.40
Comodo Security	17963	ApplicUnwnt
ESET-NOD32	9568	a variant of Win64/Adware.MultiPlug.A
G Data	24	Win64.Trojan.Multiplug.B
IKARUS anti.virus	T3.1.5.6.0	not-a-virus:AdWare.Win32.MegaSearch
K7 AntiVirus	9.176.11510	Adware ( 004922f61 )
K7GW	9.176.11510	Adware ( 004922f61 )
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	RDN/Generic PUP.x!brl
McAfee-GW-Edition	2013	RDN/Generic PUP.x!brl
Norman	7.03.02	Multiplug.A
Qihoo-360	1.0.0.1015	Win32/Trojan.Adware.273
Sophos	4.98.0	MultiPlug
SUPERAntiSpyware	5.6.0.1032	Adware.Multiplug/Variant
Trend Micro	9.740-1012	ADW_MULTIPLG
TrendMicro-HouseCall	9.700-1001	ADW_MULTIPLG
VIPRE Antivirus	27584	Win64.Adware.MultiPlug

2QAQu3yyh.dll (MD5: 230c8ce3c37ae8b366d3d28ed9a56001) has been flagged by 33 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.02.28.02	Adware/Win32.Graftor
Avira AntiVir	7.11.133.250	ADWARE/Adware.Gen
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
AVG	13.0.0.3169	Generic_r.GU
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.N
Comodo Security	17860	ApplicUnwnt.Win32.InstallRex.ALC
ESET-NOD32	9482	a variant of Win32/AdWare.MultiPlug.N
Fortinet FortiGate	4	Riskware/MultiPlug
G Data	24	Win32.Trojan.Multiplug.A
IKARUS anti.virus	T3.1.5.6.0	not-a-virus:AdWare.Win32.MegaSearch
K7 AntiVirus	9.176.11292	Adware ( 004923a41 )
K7GW	9.176.11292	Adware ( 004923a41 )
Kingsoft AntiVirus	2013.04.09.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Adware-FHP
McAfee-GW-Edition	2013	Adware-FHP
NANO AntiVirus	0.28.0.58101	Riskware.Win32.MultiPlug.cthsbt
Rising Antivirus	25.0.0.11	PE:Malware.Adware!6.1293
Sophos	4.98.0	Generic PUA NC
Symantec	20131.1.5.61	Trojan.Gen.2
Trend Micro	9.740-1012	ADW_MULTIPLG
TrendMicro-HouseCall	9.700-1001	ADW_MULTIPLG
VIPRE Antivirus	26926	JustPlugIt (fs)
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.676804
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AVware	1.5.0.16	Trojan.Win32.Generic!BT
Bitdefender	7.2	Application.Generic.676804
F-Secure	11.0.19100.45	Application.Generic.676804
MicroWorld-eScan	12.0.250.0	Application.Generic.676804
Panda Antivirus	10.0.3.5	Trj/CI.A
Norman	7.03.02	Multiplug.A
Qihoo-360	1.0.0.1015	Win32/Trojan.Adware.273
SUPERAntiSpyware	5.6.0.1032	Adware.Multiplug/Variant

Y_gdVVos.exe (MD5: c16252d1e226b9266c6ca054203f2e00) has been flagged by 27 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.679463
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AhnLab-V3	2014.07.23.00	Trojan/Win32.Preloader
avast!	8.0.1489.320	Win32:Dropper-gen [Drp]
AVG	14.0.0.3986	Generic5.AYZO
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Application.Generic.679463
Comodo Security	18944	ApplicUnwnt
ESET-NOD32	10140	a variant of Win32/AdWare.MultiPlug.AG
Fortinet FortiGate	5.1.152.0	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.679463
G Data	24	Application.Generic.679463
K7 AntiVirus	9.181.12806	Adware ( 0049c94b1 )
K7GW	9.181.12812	Adware ( 0049c94b1 )
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug
McAfee	6.0.4.564	RDN/Generic.bfr!ho
McAfee-GW-Edition	2013	RDN/Generic.bfr!ho
MicroWorld-eScan	12.0.250.0	Application.Generic.679463
Sophos	4.98.0	Generic PUA CC
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0CBH06GI14
VIPRE Antivirus	31520	Trojan.Win32.Generic!BT
Avira AntiVir	7.11.138.26	ADWARE/Adware.Gen
IKARUS anti.virus	T3.1.5.6.0	not-a-virus:AdWare.Win32.MegaSearch
Norman	7.03.02	Multiplug.A
Qihoo-360	1.0.0.1015	Win32/Trojan.Adware.273
SUPERAntiSpyware	5.6.0.1032	Adware.Multiplug/Variant
Trend Micro	9.740-1012	ADW_MULTIPLG

Y_gdVVos.dll (MD5: 6710e2de4c373aca84865f90c0eca5ee) has been flagged by 29 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.676804
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AhnLab-V3	2014.08.04.00	Adware/Win32.Agent
AVG	14.0.0.3986	Generic5.AYZN
AVware	1.5.0.16	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Application.Generic.676804
Comodo Security	19068	ApplicUnwnt
ESET-NOD32	10196	a variant of Win32/AdWare.MultiPlug.AY
Fortinet FortiGate	5.1.152.0	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.676804
G Data	24	Application.Generic.676804
IKARUS anti.virus	T3.1.6.1.0	PUA.Generic
K7 AntiVirus	9.182.12926	Adware ( 0049c94b1 )
K7GW	9.182.12926	Adware ( 0049c94b1 )
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug
McAfee	6.0.4.564	RDN/Generic PUP.x!chv
McAfee-GW-Edition	2013	RDN/Generic PUP.x!chv
MicroWorld-eScan	12.0.250.0	Application.Generic.676804
Panda Antivirus	10.0.3.5	Trj/CI.A
Sophos	4.98.0	Generic PUA DE
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0CBH06GI14
VIPRE Antivirus	31878	Trojan.Win32.Generic!BT
avast!	8.0.1489.320	Win32:Dropper-gen [Drp]
Avira AntiVir	7.11.138.26	ADWARE/Adware.Gen
Norman	7.03.02	Multiplug.A
Qihoo-360	1.0.0.1015	Win32/Trojan.Adware.273
SUPERAntiSpyware	5.6.0.1032	Adware.Multiplug/Variant
Trend Micro	9.740-1012	ADW_MULTIPLG

2QAQu3yyh.exe (MD5: 19e5eb31641597fa245deb887aa25817) has been flagged by 34 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.02.05	Trojan/Win32.Preloader
avast!	2014.9-140213	Win32:Adware-gen [Adw]
AVG	2015.0.3564	Generic_r
Baidu-International	4.0.3.14213	Adware.Win32.MegaSearch.Asdt
ESET-NOD32	8.9380	a variant of Win32/AdWare.MultiPlug.K.gen
IKARUS anti.virus	t3scan.2.2.29	not-a-virus:AdWare.Win32.MegaSearch
Kaspersky	14.0.0.4316	not-a-virus:AdWare.Win32.MegaSearch
Malwarebytes	v2014.02.13.08	PUP.Optional.MultiPlug.A
McAfee	5600.7220	PUP-FFY!19E5EB316415
McAfee-GW-Edition	7.7220	PUP-FFY!19E5EB316415
Panda Antivirus	14.02.13.08	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
Sophos	4.97	Generic PUA EC
TrendMicro-HouseCall	7.2.44	TROJ_GEN.R08NH06B314
VIPRE Antivirus	26130	MegaSearch Toolbar
Avira AntiVir	7.11.133.250	ADWARE/Adware.Gen
Comodo Security	17860	ApplicUnwnt.Win32.InstallRex.ALC
Fortinet FortiGate	4	Riskware/MultiPlug
G Data	24	Win32.Trojan.Multiplug.A
K7 AntiVirus	9.176.11292	Adware ( 004923a41 )
K7GW	9.176.11292	Adware ( 004923a41 )
Kingsoft AntiVirus	2013.04.09.267	Win32.Troj.Generic.a.(kcloud)
NANO AntiVirus	0.28.0.58101	Riskware.Win32.MultiPlug.cthsbt
Rising Antivirus	25.0.0.11	PE:Malware.Adware!6.1293
Symantec	20131.1.5.61	Trojan.Gen.2
Trend Micro	9.740-1012	ADW_MULTIPLG
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.676804
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AVware	1.5.0.16	Trojan.Win32.Generic!BT
Bitdefender	7.2	Application.Generic.676804
F-Secure	11.0.19100.45	Application.Generic.676804
MicroWorld-eScan	12.0.250.0	Application.Generic.676804
Norman	7.03.02	Multiplug.A
SUPERAntiSpyware	5.6.0.1032	Adware.Multiplug/Variant

Software Details

URL:

–

Support:

–

Installation path:

C:\ProgramData\happy2save

Uninstaller:

"C:\ProgramData\HAppy2Save\2QAQu3yyh.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""

Size:

1.00 MB

Language:

English

HAppy2Save Executable Details

Primary executable:

2QAQu3yyh.exe

Name:

HAppy2Save

Path:

C:\ProgramData\happy2save\2QAQu3yyh.exe

MD5:

19e5eb31641597fa245deb887aa25817

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

2QAQu3yyh.x64.dll

Adware

bab49b61943c026b825a714d2175635a

DLL

2QAQu3yyh.dll

Adware

230c8ce3c37ae8b366d3d28ed9a56001

EXE

Y_gdVVos.exe

Malware

c16252d1e226b9266c6ca054203f2e00

DLL

Y_gdVVos.dll

Malware

6710e2de4c373aca84865f90c0eca5ee

EXE

2QAQu3yyh.exe

Adware

19e5eb31641597fa245deb887aa25817

File Type	Filename	MD5
DLL	2QAQu3yyh.x64.dll Adware	bab49b61943c026b825a714d2175635a
DLL	2QAQu3yyh.dll Adware	230c8ce3c37ae8b366d3d28ed9a56001
EXE	Y_gdVVos.exe Malware	c16252d1e226b9266c6ca054203f2e00
DLL	Y_gdVVos.dll Malware	6710e2de4c373aca84865f90c0eca5ee
EXE	2QAQu3yyh.exe Adware	19e5eb31641597fa245deb887aa25817

HAppy2Save

What is HAppy2Save?

About HAppy2Save?

Multiple virus scanners have detected malware in HAppy2Save.

Software Details

HAppy2Save Executable Details