Scorpion Saver – adware that delivers other PUPs such as Level Quality Watcher

Scorpion Saver is an adware component that displays pop-ups when users surf online shopping sources such as Amazon, Walmart, eBay, AliExpress, Facebook, and others. According to a victim of this PUP, the program appears in the Program and Features section after a successful installation.[1] The adware can show up on web browsers such as Chrome, Explorer, Firefox, and others. It is known that Scorpion Saver can bring additional PUPs to the system such as Yontoo, FBPhoto Zoom, Superfish, 1Click Download, and Level Quality Watcher that is created by Adpeak Inc and boots up within every computer startup process. The adware also adds its main file ScorpionSaver.msi to the computer system that allows it to carry out its activities. However, the potentially unwanted program can also alter locations such as the Task Manager and Registry.
Scorpion Saver has earned the name of a PUP and adware that provides speculation about this app's distribution strategies. It is no secret that PUPs use deceptive tactics such as “software bundling” and comes together with freeware or shareware to enter the user's computer. Another user has reported that the adware virus has shown up after he downloaded a scan to PDF by Softi Scan from a third-party downloading website named Cnet.com.[2]
| Name | Scorpion Saver |
|---|---|
| Type | Adware/PUP |
| Goal | This product delivers various coupons and pop-ups while visiting shopping websites such as Walmart, Amazon, eBay, AliExpress, Facebook, etc. The adware aims to benefit from the clicks that are made on its ads |
| Appearance | The adware program can appear on both Windows and macOS computers. It also targets web browser apps such as Google Chrome, Mozilla Firefox, Internet Explorer, MS Edge, and Safari |
| Location | After successful installation, the adware usually appears in the Programs and Features section. Also, it can alter locations such as the Task Manager and Registry |
| Related file | The adware ends up as the ScorpionSaver.msi file on the computer |
| Additional PUPs | It is known that the adware rarely comes alone. It is capable of installing other PUPs such as Yontoo, FBPhoto Zoom, Superfish, 1Click Download, and Level Quality Watcher |
| Distribution | The potentially unwanted program ends up on computer systems by using a deceptive technique such as “bundling”. The product is often brought from third-party downloading networks such as Cnet.com |
| Elimination | You can get rid of the adware with the help of automatical software. Alternatively, you can use the manual step-by-step guidelines that have been added to the end of this article |
| Fix process | If you have found any signs of system compromisation, you can try fixing the alterings with FortectIntego |
A lot of users appear to have trouble with uninstalling Scorpion Saver virus from their computer system/web browsers and the infection rate appears to be very high according to the number of victims' reports all over the Internet sphere. One person claims that he is unable to uninstall this adware program and receives the following message while trying to delete the PUP from the Programs and Features directory:[3]
The feature you are trying to use is on a network resource that is unavailable.
Scorpion Saver is a potentially unwanted application, which is usually mixed with virus or malware. In reality, this program cannot harm your computer directly. However, it can be blamed for unfair distribution methods and annoying activities that are initiated when the user starts browsing on the Internet. Typically, this adware is used to distribute a lot of different advertisements that report about discounts, coupons, sales, price comparisons, and similar content. If you ever spot advertisements from Scorpion Saver, they might be marked as:
- Powered by Scorpion Saver;
- Ads by Scorpion Saver;
- Scorpion Saver advertisements;
- Provided by Scorpion Saver;
- Scorpion Saver ads.
Scorpion Saver might try to benefit from the cost-per-click technique[4] by gathering as many clicks on the advertisements as possible. No matter how trustworthy they look, these ads are displayed just for trying to redirect people to related websites that seek to increase their page rank or sales somehow. Some of these redirects might take the user to potentially malicious websites that can increase the chances of getting unknowingly infected with dangerous malware such as a Trojan virus.

In addition to Scorpion Saver redirects that are caused as soon as the victim clicks on one of its continuous advertisements, this program may easily start tracking the victim and collect data that is related to his/her search terms, mostly visited websites, entered data, PC's information, etc. We do not think that you should agree to reveal such details to unknown parties because they use them for targeted advertising or sharing with other parties for income.
Scorpion Saver might also tend to change major settings in web browsers such as Google Chrome, Mozilla Firefox, Internet Explorer, Safari, and Microsoft Edge. The adware can apply modifications to the browser's homepage and new tab URL sections. Additionally, it might add questionable-looking extensions, plug-ins, and add-ons that also need to be terminated while completing the Scorpion Saver removal process, otherwise, the adware might easily return.
Another reason to remove Scorpion Saver is the fact that it can bring other potentially unwanted programs to the computer system. Nevertheless, some developers use adware as a malware distribution source, so you should be careful after the adware attacks. Search your entire computer system with antimalware software for potential threats. If you discover some system corruption, you can try fixing things with FortectIntego software or any other similar helpful program.
Scorpion Saver needs to be removed as soon as you spot the first symptoms such as advertising and redirecting. As we have already mentioned, the program can bring suspicious/malicious components to your computer system that need to be avoided in order to prevent system corruption. Nevertheless, if you keep this program on your machine for a long period of time, you might find yourself struggling to perform simple activities and programs crashing due to intense activities.

The infiltration techniques of adware apps
According to cybersecurity experts from ZonderVirus.nl,[5] adware programs are mostly distributed by using unfair distribution techniques that rely on freeware and shareware. It means that this program can be installed on your computer when installing another free program, such as video recording/streaming software, some download-manager or PDF creator from third-party downloading websites such as Cnet.com, softonic.com, download.com, and others.
This distribution method is legal but it really initiates various discussions on the Internet and has already been named as “suspicious”. For preventing such unexpected downloads, you should pay more attention to the installation process of the freeware. If you want to see all optional components and get the ability to opt-out of them, you should select the Custom or Advanced installation of the freeware. After that, you should uncheck all suspicious checkboxes.
Additionally, adware apps can get spread through infectious advertisements and hyperlinks that are left on third-party websites. You should always avoid visiting unprotected sources that are marked as unsafe to proceed with by your web browser or antivirus tool. Also, do not click on every component that you see while browsing the Internet sphere. Install Adblock Plus to prevent unwanted advertisements from appearing on your computer screen.
Removing Scorpion Saver virus from your PC and browser apps
If you want to get rid of continuous pop-up ads from Scorpion Saver virus, you must remove this program from the system properly. Additionally, you should check the system for other potentially unwanted programs that might have been brought by the adware application.
Scorpion Saver removal can be performed with the help of automatical software that will ensure that the entire process is carried out within a few minutes of time. Continuously, these types of tools will scan your entire machine and find all the additional components that the program has brought.
Alternatively, you can remove Scorpion Saver with the help of the manual step-by-step guidelines that are added to the end of this article. Our cybersecurity experts have provided instructions that should help you to clean your operating system and web browsers such as Google Chrome, Mozilla Firefox, Internet Explorer, Microsoft Edge, and Safari.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.

Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.

Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.

Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.

Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Was this guide helpful?
39 comments