Deal Spy.dll
Deal Spy by Innovative Apps (Signed)
| Version: | 1.1.153.5 |
| MD5: | 7f06b1413754f066c76f441a453f681a |
| SHA1: | a90036be57c204acb304c550e715a97b1b230e2f |
| SHA256: | 33e002aa7fe01bf34622a1ffc43047ffae7acfdda731928173e74b1edbc83945 |
Warning 5 antivirus scanners has detected malware.
Overview
deal spy.dll is malware that is loaded as dynamic link library that runs in the context of Internet Explorer. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. This is typically installed with the program Deal Spy published by 215 Apps and is most likely removed by most users once installed (87% removed). The file is digitally signed by Innovative Apps which was issued by the Thawte certificate authority (CA).
Details
| File name: | deal spy.dll |
| Publisher: | 215 Apps |
| Product name: | Deal Spy |
| Description: | Deal Spy BHO |
| Typical file path: | C:\Program Files\deal spy\deal spy.dll |
| File version: | 1.1.153.5 |
| Size: | 687.88 KB (704,392 bytes) |
| Build date: | 2/11/2013 6:07 AM |
| Certificate |
| Issued to: | Innovative Apps |
| Authority (CA): | Thawte |
| Effective date: | Tuesday, January 8, 2013 |
| Expiration date: | Thursday, January 9, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Deal Spy from 215 Apps (Amazing Apps, Friendly Apps, and a bunch of other names 50onRed goes by) installs an extension within all the major browsers to view web pages loaded and looks for affiliated merchants in order to possibly provide better pricing or alternative deals on a given product or merchant. It injects ads as well as affiliate links directly by modifying web page. In addition, it has been seen to display non-embedded pop-up...
Behaviors
Internet Explorer Browser Helper Object
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'
- BHO CLSID: {11111111-1111-1111-1111-110211621176}
Malware detections
Based on 40+ industry antivirus scanners, 5 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Emsisoft Anti-Malware |
3.0.0.575 |
Riskware.Win32.Toolbar.CrossRider.AMN (A) |
| ESET NOD32 |
7.8265 |
a variant of Win32/Toolbar.CrossRider.A |
| Ikarus |
T3.1.4.0.0 |
AdWare.Win32.CouponCompanion |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1CL |
| VIPRE Antivirus |
17168 |
GamePlayLabs (v) |
Distribution by Windows OS
| OS version | distribution |
| Windows 8 |
50.00% |
|
| Windows 8 Pro |
50.00% |
|
Distribution by country
United States installs about 100.00% of Deal Spy.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
66.67% |
|
| Hewlett-Packard |
33.33% |
|
