SpecialSavings

By LoneStar in Browser Plugins

Threat Scorecard

Ranking: 8,097
Threat Level: 20 % (Normal)
Infected Computers: 6,708
First Seen: October 24, 2011
Last Seen: March 7, 2024
OS(es) Affected: Windows

SpecialSavings is a web browser plugin that attempts to offer online shopping savings and deals. Many times SpecialSavings will get in the way with annoying pop-ups and rendering redirects to unwanted sites. The SpecialSavings add-on is not malicious by itself but rather an unwanted extension that may be installed directly from the SpecialSavings.com website or through the installation of bundled software. Either way, once SpecialSavings is loaded it will repeatedly attempt to offer online deals causing for a annoying situation for computer users. Automatic removal of SpecialSavings can be handled with the use of an antispyware application.

Aliases

1 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AntiVir ADSPY/SuperFish.A

SpyHunter Detects & Remove SpecialSavings

File System Details

SpecialSavings may create the following file(s):
# File Name MD5 Detections
1. SpecialSavingsSinged.dll d8e638465254e844a0049ac9108fc483 1,286
2. SpecialSavings.dll 4d24bf22483cb058e769d43abe953b6d 1,115
3. SpecialSavingsSinged.dll.vir 1266f1c721741bce32890ad0de9aff76 235
4. SpecialSavingsSinged.dll 135ebb4819704fa52a9221419191e80e 12
5. DealFinderSetup.exe 1203d06c42a49ed753a316bd534c35b9 0

Registry Details

SpecialSavings may create the following registry entry or registry entries:
CLSID
{4EC06F7F-2290-4D9E-8D24-54CE42766B04}
{52F4D3D2-195C-4A46-AEE6-ED2D56BDE1C3}
{56493971-6146-42C3-BFC3-3E4CBB768777}
{938958E8-355C-49FF-92B0-53C1B87ACEA9}
{A49B770D-F83D-40D9-9478-C7DA97736004}
{AFFE513B-69AD-4C97-A74F-95AB17C9D42C}
{C718BDD4-197A-4A23-B539-EB3B3A2B0C09}
{E0C361C8-1477-45C2-BC83-C1C8C913551F}
SOFTWARE\Classes\specialsavings.BackgroundHostObject
SOFTWARE\Classes\specialsavings.BackgroundHostObject.1
SOFTWARE\Classes\specialsavings.Navbar
SOFTWARE\Classes\specialsavings.Navbar.1
SOFTWARE\Classes\SpecialSavings.ScriptHostObject
SOFTWARE\Classes\SpecialSavings.ScriptHostObject.1
SOFTWARE\Classes\specialsavings.Tool
SOFTWARE\Classes\specialsavings.Tool.1
Software\Microsoft\Internet Explorer\Approved Extensions\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
Software\Mozilla\Firefox\Extensions\SpecialSavings@SpecialSavings.com

Directories

SpecialSavings may create the following directory or directories:

%APPDATA%\SpecialSavings
%PROGRAMFILES%\SpecialSavings
%PROGRAMFILES(x86)%\SpecialSavings

URLs

SpecialSavings may call the following URLs:

specialsavings.com

Trending

Most Viewed

Loading...