Giant Savings.dll
Giant Savings by Awesome Apps (Signed)
Warning 18 antivirus scanners has detected malware in various versions of Giant Savings.dll.
Overview
giant savings.dll has 2 known versions, the most recent one is 1.1.151.43. It is installed as an Internet Explorer extension as a Browser Helper Object, often without any obvious user interface, and will start when IE loads. The average file size is about 599.63 KB. It is an authenticode code-signed executable issued to Awesome Apps by the certification authority Thawte. Some variations of the file have been seen to be installed with the program Giant Savings from 215 Apps.
What is giant savings.dll?
Giant Savings BHO is the Browser Helper Object installed into Internet Explorer which has the ability to access and monitor all loaded and requested web pages and content. Giant Savings is an adware type program that has causes serious performance issues to your PC by installing a number of plug-ins and add-ins to your web browser and Windows. It injects ads directly by modifying web pages based on your surfing habits.
About giant savings.dll (from Awesome Apps)
“Giant Savings takes couponing to the next level by providing users with an easy to use coupon list they can use to save as they browse. Savings in a single click. The sad truth about online shopping i”
Details |
File name: | giant savings.dll |
Publisher: | 215 Apps |
Product name: | Giant Savings |
Description: | Giant Savings BHO |
Typical file path: | C:\Program Files\giant savings\giant savings.dll |
Certificate |
Issued to: | Awesome Apps |
Authority (CA): | Thawte |
Effective date: | Tuesday, August 28, 2012 |
Expiration date: | Thursday, August 29, 2013 |
Programs installed in
(Note, the programs listed below are for all versions of Giant Savings.)
Giant Savings from 215 Apps (Amazing Apps/50onRed) installs a web browser extension (Internet Explorer Browser Helper Object) to view web pages loaded and looks for affiliated merchants in order to po...
Behaviors
(Note, the behaviors below are for all versions of giant savings.dll, select a unique version for details.)
Internet Explorer Browser Helper Object
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'
- BHO CLSID: {11111111-1111-1111-1111-110011441179}
Malware detections
Based on 40+ industry antivirus scanners, 18 of them detected the following malware.
Antivirus engine | Engine version | Detection | File version |
AVG |
2014.0.3629 |
Suspicion: unknown virus |
1.1.151.36 |
AVG |
2014.0.3629 |
Suspicion: unknown virus |
1.1.151.43 |
BitDefender |
7.2 |
Gen:Variant.Adware.VidSaver.1 |
1.1.151.36 |
Dr.Web |
8.13.4.10 |
Adware.Plugin.14 |
1.1.151.36 |
ESET NOD32 |
7.8054 |
a variant of Win32/Toolbar.CrossRider.A |
1.1.151.36 |
ESET NOD32 |
7.7850 |
a variant of Win32/Toolbar.CrossRider.A |
1.1.151.43 |
F-Secure |
11.0.19020.35 |
Gen:Variant.Adware.VidSaver.1 |
1.1.151.36 |
G Data |
13.4.22 |
Gen:Variant.Adware.VidSaver.1 |
1.1.151.36 |
eScan by MicroWorld |
12.0.250.0 |
Gen:Variant.Adware.VidSaver.1 |
1.1.151.36 |
PC Tools |
9.0.0.2 |
Adware.Crossid!rem |
1.1.151.36 |
PC Tools |
8.0.0.5 |
Adware.Crossid!rem |
1.1.151.43 |
Sophos |
4.84.0 |
AppRider |
1.1.151.43 |
Symantec |
20121.3.0.76 |
Adware.Crossid |
1.1.151.36 |
Symantec |
20121.2.1.2 |
Adware.Crossid |
1.1.151.43 |
Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1AH |
1.1.151.36 |
Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V1202 |
1.1.151.43 |
VIPRE Antivirus |
15756 |
GamePlayLabs (v) |
1.1.151.36 |
VIPRE Antivirus |
14796 |
GamePlayLabs (v) |
1.1.151.43 |
All file variations of giant savings.dll