Adware.Deal Spy
Posted: April 2, 2013
Threat Metric
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
Ranking: | 13,324 |
---|---|
Threat Level: | 2/10 |
Infected PCs: | 691 |
First Seen: | April 2, 2013 |
---|---|
Last Seen: | August 22, 2023 |
OS(es) Affected: | Windows |
Deal Spy is a potentially unwanted program/adware, which is produced by 215 Apps. Deal Spy will display pop-up advertisements, savings coupon, and deals on the desktop of the infected computer while the PC user is surfing the Internet. Deal Spy will show up as a small box on upper right corner of the hijacked Internet browser when the computer users visits online shopping websites. Deal Spy shows up as a small button that, when clicked, will reveal the contents displaying links for numerous offers. Deal Spy usually installs a browser add-on on Internet Explorer, Google Chrome, and Mozilla Firefox. Deal Spy may come packed with free software products and applications that computer users have downloaded from different websites. When the PC users is installing the specific application, he/she also unknowingly loads Deal Spy or other types of adware without permission.
Technical Details
Registry Modifications
CLSID{11111111-1111-1111-1111-110211621176}{22222222-2222-2222-2222-220222622276}{55555555-5555-5555-5555-550255625576}{66666666-6666-6666-6666-660266626676}HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\Deal SpySOFTWARE\Classes\CrossriderApp0026276.SandboxSOFTWARE\Classes\CrossriderApp0026276.Sandbox.1Software\Cr_Installer\26276Software\InstalledBrowserExtensions\215 Apps\26276SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Deal Spy-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Deal Spy-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Updater26276.exeSOFTWARE\Wow6432Node\Deal SpySOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211621176}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211621176}SOFTWARE\Wow6432Node\Microsoft\Tracing\Deal Spy_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\Deal Spy_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\Updater26276_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\Updater26276_RASMANCS
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.