Home Malware Programs Adware Giant Savings

Giant Savings

Posted: January 18, 2013

Threat Metric

Ranking: 10,372
Threat Level: 2/10
Infected PCs: 17,039
First Seen: January 18, 2013
Last Seen: September 16, 2023
OS(es) Affected: Windows

Giant Savings is a PUP and potential adware program that displays digital coupon offers in your web browser. Due to limited information about the Giant Savings company, SpywareRemove.com malware researchers are unable to verify how many of these coupons are genuine bargains, but they do note that similar programs often are used to promote the products of sponsored partners – rather than being deals that are selected with an eye on your best interests. The Giant Savings PUP is a browser add-on that occasionally is installed by unrelated programs. If you experience Giant Savings's coupon-waving behavior without remembering that you installed Giant Savings, SpywareRemove.com malware experts recommend the use of good anti-malware software to remove Giant Savings and any other Potentially Unwanted Programs that may have been placed on your PC non-consensually.

As a program that's dedicated to displaying third-party browser content, Giant Savings could be classified as adware, although the legitimacy of its coupon-based bargains remains under determination. While SpywareRemove.com malware experts haven't seen any indications whatsoever that Giant Savings promotes content that could harm your computer, there are similar coupon-based programs like Giant Savings that tend to associate with adware.

According to its major functions, Giant Savings is similar to Coupon Companion, Coupon Alert Toolbar and similar PUPs. Like them, Giant Savings also often is distributed through the installers of completely different programs that happen to be bundled with Giant Savings. Under such circumstances, you can expect Giant Savings's installation text to describe Giant Savings in glowing albeit vague terms that try to present Giant Savings as a useful product. However, under no circumstances should Giant Savings ever be considered an integral component of any other program, and you always should feel free to remove Giant Savings if you've decided that you're uninterested in its content.

Shredding Giant Savings's Offers of Sales

Because misleading software installation methods that install Giant Savings also may be used to install more dangerous types of PC threats than adware, SpywareRemove.com malware research team recommends that anti-malware software be involved whenever deleting Giant Savings is deemed necessary. However, by itself, Giant Savings cant' be considered a meaningful threat to your PC's safety (although Giant Savings's persistent display of coupon-based content may degrade your web-browsing performance).

Giant Savings, rather than being particular to one browser, is compatible with most major brands, including Firefox, IE and Chrome. You never should resort to changing your browser or its settings to rid your PC of Giant Savings or any other Potentially Unwanted Program, since these changes will, at best, remove the symptom while keeping the underlying software on your hard drive.

Aliases

SmartShopper.G [AVG]W32/Banker.XHH!tr [Fortinet]Trojan-Banker.Win32.Banbra [Ikarus]TR/ATRAPS.Gen [AntiVir]Mal/Bancos-BT [Sophos]Generic Trojan [Panda]ILAgent [AVG]MSIL/Agent.MNW!tr [Fortinet]Trojan.Msil [Ikarus]TR/Bladabindi.J.1 [AntiVir]Trojan.Generic.7753695 [F-Secure]TrojWare.MSIL.Spy.Agent.CPC [Comodo]Win32:Agent-APAI [Spy] [Avast]W32/MSIL_Troj.AP.gen!Eldorado [F-Prot]Artemis!630394F83260 [McAfee]
More aliases (66)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Qoobox\Quarantine\C\Program Files (x86)\Giant Savings Extension\GiANt savings extension.dll.vir File name: GiANt savings extension.dll.vir
Size: 613.37 KB (613376 bytes)
MD5: eb189da958ad25d24a8836acf8739e92
Detection count: 5,691
Mime Type: unknown/vir
Path: C:\Qoobox\Quarantine\C\Program Files (x86)\Giant Savings Extension\GiANt savings extension.dll.vir
Group: Malware file
Last Updated: June 2, 2022
%PROGRAMFILES%\Giant Savings Extension\Giant Savings Extension.dll File name: Giant Savings Extension.dll
Size: 637.95 KB (637952 bytes)
MD5: 714e45ae5f6ef45b130ac50660240f05
Detection count: 3,073
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Giant Savings Extension
Group: Malware file
Last Updated: January 7, 2021
%APPDATA%\NOTE02\mq1.cpl File name: mq1.cpl
Size: 1.22 MB (1223680 bytes)
MD5: bcfdb369e2a2d2ffa0cd795b14fdd805
Detection count: 66
Mime Type: unknown/cpl
Path: %APPDATA%\NOTE02
Group: Malware file
Last Updated: March 1, 2013
GiantSavings.exe File name: GiantSavings.exe
Size: 1.86 MB (1860056 bytes)
MD5: 9f8e74b1dc9b07d7dcc3d48b299474ba
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 22, 2013
%WINDIR%\system32\fastsrch.dll File name: fastsrch.dll
Size: 123.39 KB (123392 bytes)
MD5: b9fcf1fe17aa83e9e51a1458c426562d
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 1, 2013

Registry Modifications

The following newly produced Registry Values are:

CLSID{11111111-1111-1111-1111-110011441179}{22222222-2222-2222-2222-220022442279}{44444444-4444-4444-4444-440044444479}{55555555-5555-5555-5555-550055445579}{66666666-6666-6666-6666-660066446679}HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\Giant SavingsSOFTWARE\Classes\CrossriderApp0004479.BHOSOFTWARE\Classes\CrossriderApp0004479.BHO.1SOFTWARE\Classes\CrossriderApp0004479.SandboxSOFTWARE\Classes\CrossriderApp0004479.Sandbox.1Software\Cr_Installer\4479Software\InstalledBrowserExtensions\215 Apps\4479SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011441179}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Giant Savings-bg.exeSOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\Giant Savings_RASMANCSHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Giant Savings

Additional Information

The following directories were created:
%LOCALAPPDATA%\Giant Savings%LOCALAPPDATA%\Updater4479%PROGRAMFILES%\Giant Savings%PROGRAMFILES%\Giant Savings Extension%PROGRAMFILES(x86)%\Giant Savings%PROGRAMFILES(x86)%\Giant Savings Extension%UserProfile%\Local Settings\Application Data\Giant Savings%UserProfile%\Local Settings\Application Data\Updater4479
The following URL's were detected:
Giant Savings
Loading...