Home Malware Programs Adware Savepath Deals

Savepath Deals

Posted: April 9, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 23,817
First Seen: April 9, 2013
Last Seen: June 13, 2023
OS(es) Affected: Windows

Savepath Deals is an adware program that inserts advertisements into your Web pages, supposedly to improve your shopping experience by offering discounts and deals. However, Savepath Deals's advertising content doesn't always appear to be sorted according to preferential price-checking methodology and occasionally includes irrelevant or even malicious advertisements (such as fake Windows Media Player updates). Although coming into contact with the Savepath Deals website or sites related to Savepath Deals is not very dangerous, you should remove Savepath Deals from your PC with reliable anti-malware software – as is always suggested for any kind of adware that doesn't truly benefit your Web browser.

Savepath Deals: Just Another Fraud with Scams for Deals

Barely better than a snake oil salesman for the Internet age, Savepath Deals is one of many adware programs to make claims for improving your ability to find good prices while shopping online, but Savepath Deals's actual functions make Savepath Deals indistinguishable from adware. Savepath Deals advertisements usually are displayed as script injections into the pages of sites like Amazon and Ebay, a function that usually circumvents any advertisement-blocking software while also hindering your browsing of these sites.

Although many of Savepath Deals's advertisements do appear to offer legitimate shopping-related deals, Savepath Deals displays advertisements from less-than-benign third parties, as well. Interacting with Savepath Deals's advertisement content is, therefore, discouraged as a potential security concern, and SpywareRemove.com malware researchers recommend keeping the affected browser closed until you've removed Savepath Deals.

The Safe Path Out of a Savepath Deals Infection

Savepath Deals is specific to Internet Explorer and can be avoided by using other browsers, but avoiding Savepath Deals's advertisements isn't an equally-safe substitute for removing Savepath Deals from your PC completely. Since Savepath Deals's included uninstaller may be non-functional and the program may be designed to resist being deleted, SpywareRemove.com malware analysts must recommend using anti-malware products to rid your browser of Savepath Deals and its browser advertisements. PC users who prefer other browsers also shouldn't become too complacent, since adware-based threats identical to Savepath Deals with different brand names have been seen on Chrome and Firefox on a regular basis.

Savepath Deals promotes itself as an independent shopping tool, but usually will be installed only with bundlers that insert Savepath Deals into the installation processes of completely unrelated applications. Above all else, keeping a safe distance from a malicious or disreputable download site is your most simple and foremost protection against a Savepath Deals infection, although almost any competent anti-malware utility worthy of the name also should be able to detect Savepath Deals on sight.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\SDDUpdater\updater.exe File name: updater.exe
Size: 1.76 MB (1760672 bytes)
MD5: 75a9cc4cc6c12a05e22443070443c4e7
Detection count: 10,893
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\SDDUpdater
Group: Malware file
Last Updated: June 2, 2014
C:\Program Files\Savepath Deals\SavepathDeals.dll File name: SavepathDeals.dll
Size: 1.79 MB (1799168 bytes)
MD5: 696b2876a3b46b8f50029cae956af513
Detection count: 10,685
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files\Savepath Deals\SavepathDeals.dll
Group: Malware file
Last Updated: January 27, 2022
%PROGRAMFILES%\Savepath Deals\SavepathDeals.dll File name: SavepathDeals.dll
Size: 1.79 MB (1799168 bytes)
MD5: c5ee05539f28f6d46298c3b702ba6ab6
Detection count: 1,686
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Savepath Deals
Group: Malware file
Last Updated: December 22, 2019

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Tracing\1009_RASAPI32SOFTWARE\Microsoft\Tracing\1009_RASMANCSSOFTWARE\spd\Savepath Deals MergedSOFTWARE\spd\updaterSOFTWARE\Wow6432Node\Microsoft\Tracing\1009_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\1009_RASMANCSSOFTWARE\Wow6432Node\spd\Savepath Deals MergedSOFTWARE\Wow6432Node\spd\updaterSYSTEM\ControlSet001\services\spd UpdaterSYSTEM\CurrentControlSet\services\spd UpdaterHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Savepath Deals

Additional Information

The following directories were created:
%PROGRAMFILES%\SPDUpdater%PROGRAMFILES%\Savepath Deals%PROGRAMFILES(x86)%\SPDUpdater%PROGRAMFILES(x86)%\Savepath Deals
The following URL's were detected:
Savepath Deals

One Comment

Loading...