SpecialSavings

SpecialSavings Description

SpecialSavings is a web browser plugin that attempts to offer online shopping savings and deals. Many times SpecialSavings will get in the way with annoying pop-ups and rendering redirects to unwanted sites. The SpecialSavings add-on is not malicious by itself but rather an unwanted extension that may be installed directly from the SpecialSavings.com website or through the installation of bundled software. Either way, once SpecialSavings is loaded it will repeatedly attempt to offer online deals causing for a annoying situation for computer users. Automatic removal of SpecialSavings can be handled with the use of an antispyware application.

Aliases: ADSPY/SuperFish.A [AntiVir] and Trojan.Malware.Win32.xPack.i.

Technical Information

File System Details

SpecialSavings creates the following file(s):
# File Name Size MD5 Detection Count
1 C:\Program Files (x86)\Superfish\Special Savings\SpecialSavings.dll\SpecialSavings.dll 307,200 4d24bf22483cb058e769d43abe953b6d 1,114
2 %SYSTEMDRIVE%\$SysReset\OldOS\AdwCleaner\Quarantine\C\Program Files (x86)\SpecialSavings\SpecialSavingsSinged.dll.vir\SpecialSavingsSinged.dll.vir 223,232 1266f1c721741bce32890ad0de9aff76 214
3 %PROGRAMFILES%\SpecialSavings\SpecialSavingsSinged.dll 287,702 135ebb4819704fa52a9221419191e80e 12
4 DealFinderSetup.exe 620,792 1203d06c42a49ed753a316bd534c35b9 0
More files

Registry Details

SpecialSavings creates the following registry entry or registry entries:
Registry key
SOFTWARE\Classes\specialsavings.BackgroundHostObject
SOFTWARE\Classes\specialsavings.BackgroundHostObject.1
SOFTWARE\Classes\specialsavings.Navbar
SOFTWARE\Classes\specialsavings.Navbar.1
SOFTWARE\Classes\SpecialSavings.ScriptHostObject
SOFTWARE\Classes\SpecialSavings.ScriptHostObject.1
SOFTWARE\Classes\specialsavings.Tool
SOFTWARE\Classes\specialsavings.Tool.1
Software\Microsoft\Internet Explorer\Approved Extensions\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
Software\Mozilla\Firefox\Extensions\SpecialSavings@SpecialSavings.com
CLSID
{4EC06F7F-2290-4D9E-8D24-54CE42766B04}
{52F4D3D2-195C-4A46-AEE6-ED2D56BDE1C3}
{56493971-6146-42C3-BFC3-3E4CBB768777}
{938958E8-355C-49FF-92B0-53C1B87ACEA9}
{A49B770D-F83D-40D9-9478-C7DA97736004}
{AFFE513B-69AD-4C97-A74F-95AB17C9D42C}
{C718BDD4-197A-4A23-B539-EB3B3A2B0C09}
{E0C361C8-1477-45C2-BC83-C1C8C913551F}
Uninstaller
SpecialSavings
Directory
%APPDATA%\Mozilla\Extensions\SpecialSavings@SpecialSavings.com
%APPDATA%\SpecialSavings
%PROGRAMFILES%\SpecialSavings
%PROGRAMFILES(x86)%\SpecialSavings

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.