Deal Slider

Posted: November 12, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	2,321

First Seen:	November 12, 2013
Last Seen:	April 10, 2023
OS(es) Affected:	Windows

Deal Slider or Deal-Slider is adware that displays coupons and other shopping-related offers by injecting them into various Web pages arbitrarily. Although advertisements offered by Deal Slider aren't certain to be dangers to your computer, malware researchers do consider it wise to remove most types of adware due to their impact on your browser's performance, along with the inherent security risks of such advertisements. Because deleting Deal Slider through any of the usual methods leaves a chance of some of its browser changes being left intact, using anti-malware or anti-adware tools for Deal Slider's deletion is generally considered the safest solution to a case of an unwanted Deal Slider installation.

The Deal Slide that's as Inevitable as Gravity

While crafting adware is an easy way for a low-skill programmer to earn a little 'free' money, it's not necessarily easy to convince users to install what amounts to a digital delivery tool for extra advertisements. Deal Slider is one of many adware programs to have taken the social engineering-based route of marketing by presenting its advertising features as beneficial to your online shopping experience. Malware experts can't guarantee that all of Deal Slider's bargains and coupons are necessarily the best available, and they also add the cautionary note that Deal Slider sometimes has been found showing unrelated advertisements without any special time-limited deals attached to them.

Deal Slider's advertisements are shown in your browser as injected banners and similar advertisements, with any individual Deal Slider advertisement being identified through its 'Ads by Deal Slider' tag line. Unfortunately, while Deal Slider's advertisements may or may not be useful to you, it's unquestionable that Deal Slider's refusal to let you control when these advertisements load or how they load is to the overall detriment of your browser's security and performance. Considering these issues, deleting Deal Slider usually should be your reaction to its presence – unless you have some specific reasons for wanting to keep Deal Slider installed.

Sliding Back Up out of Deals You Didn't Want

While installing Deal Slider as an independent program certainly is possible, Deal Slider and similar adware often use free software sites for general distribution to the masses. You may expect to risk encountering Deal Slider in software bundles that package Deal Slider with installers for unrelated products, such as movie players or codec packs. In some cases, paying attention to any options made available during installation may let you opt out of Deal Slider. Some anti-adware and general anti-malware products also can detect various software bundlers, and malware experts, of course, recommend using these programs for removing Deal Slider when it's required.

Deal Slider and its fellows aren't designed to endanger your computer deliberately. Although they're intended to be lawful money-making programs, such adware products often accidentally distribute drive-by-downloads, rogue system scanners, phishing attacks and other PC threats. While dealing with Deal Slider, you should be attentive to all possible threats through its advertisements, and never install software advertised by Deal Slider that hasn't been confirmed to be from a trusted source.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%PROGRAMFILES(x86)%\Deal Slider\FrameworkBHO64.dll

File name: FrameworkBHO64.dll
Size: 322.6 KB (322600 bytes)
MD5: e6dd120fb0091026fd06c00668911567
Detection count: 1,059
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES%\Deal Slider\FrameworkBHO.dll

File name: FrameworkBHO.dll
Size: 256.55 KB (256552 bytes)
MD5: 9733ef874cc3d06bdd4ac69e5144f9cd
Detection count: 295
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES%\Deal Slider\FrameworkEngine.exe

File name: FrameworkEngine.exe
Size: 245.8 KB (245800 bytes)
MD5: c65a5fb92380cdac27004ba3c1aefc0d
Detection count: 269
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES(x86)%\Deal Slider\FrameworkBHO64.dll

File name: FrameworkBHO64.dll
Size: 322.6 KB (322600 bytes)
MD5: 460d7a03e95c48e42764af158e32b72e
Detection count: 96
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES%\Deal Slider\FrameworkBHO.dll

File name: FrameworkBHO.dll
Size: 258.08 KB (258088 bytes)
MD5: 7313662b839dbe16a431fc4543455bbe
Detection count: 86
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%ProgramFiles(x86)%\Deal Slider\Deal Slider-codedownloader.exe

File name: Deal Slider-codedownloader.exe
Size: 498.56 KB (498568 bytes)
MD5: 3e9637638ec2e258d6f693cd9e14d753
Detection count: 60
File type: Executable File
Mime Type: unknown/exe
Path: %ProgramFiles(x86)%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%ProgramFiles(x86)%\Deal Slider\Deal Slider-buttonutil64.exe

File name: Deal Slider-buttonutil64.exe
Size: 454.53 KB (454536 bytes)
MD5: 8af4eb80d75a5ac13c85fb112df30dd5
Detection count: 55
File type: Executable File
Mime Type: unknown/exe
Path: %ProgramFiles(x86)%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES(x86)%\deal slider\deal slider-bg.exe

File name: deal slider-bg.exe
Size: 1.49 MB (1493896 bytes)
MD5: c7b6955077bc332a3d00b7722196cf7b
Detection count: 31
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\deal slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES%\Deal Slider\Deal Slider.dll

File name: Deal Slider.dll
Size: 734.08 KB (734088 bytes)
MD5: 6be89ecdfd02923c3bae35df8ba153c5
Detection count: 28
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES(x86)%\Deal Slider\FrameworkEngine.exe

File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: e5e4632ebd813b08870cb4985356f4ab
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES(x86)%\deal slider\deal slider-bg.exe

File name: deal slider-bg.exe
Size: 1.49 MB (1493896 bytes)
MD5: 9f005d5814dd5d8da78213e6b393acbd
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\deal slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES%\Deal Slider\Deal Slider.dll

File name: Deal Slider.dll
Size: 734.08 KB (734088 bytes)
MD5: 70320f3c474a05077d77840cae636c6a
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES%\deal slider\deal slider-bg.exe

File name: deal slider-bg.exe
Size: 1.49 MB (1493896 bytes)
MD5: c6bd3f5082e94e35c6707f2112e5b593
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\deal slider
Group: Malware file
Last Updated: June 11, 2014

%PROGRAMFILES%\deal slider\deal slider-bg.exe

File name: deal slider-bg.exe
Size: 1.49 MB (1493896 bytes)
MD5: 0f174f6f20c1f3bd8632647a12396811
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\deal slider
Group: Malware file
Last Updated: June 11, 2014

%LOCALAPPDATA%\Deal Slider\uninstall.exe

File name: uninstall.exe
Size: 145.63 KB (145632 bytes)
MD5: b5d928862fe7ad17a79b06b2436d5b43
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Deal Slider
Group: Malware file
Last Updated: February 19, 2020

%PROGRAMFILES(x86)%\Deal Slider\Deal Slider-bho64.dll

File name: Deal Slider-bho64.dll
Size: 967.04 KB (967048 bytes)
MD5: 211aa53e750534d58f8ff60db28439f7
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Deal Slider
Group: Malware file
Last Updated: June 11, 2014

DealSlider.exe

File name: DealSlider.exe
Size: 4.02 MB (4023344 bytes)
MD5: 7a544b7eac3bd62f909912e6e5ffaa59
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: August 17, 2022

Registry Modifications

The following newly produced Registry Values are:

CLSID{11111111-1111-1111-1111-110011501161}{44444444-4444-4444-4444-440044504461}{66666666-6666-6666-6666-660066506661}{E4607B39-174A-44BA-AB08-8892366ECA13}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\CrossriderApp0005061.BHOSOFTWARE\Classes\CrossriderApp0005061.BHO.1SOFTWARE\Classes\CrossriderApp0005061.SandboxSOFTWARE\Classes\CrossriderApp0005061.Sandbox.1SOFTWARE\Deal SliderSoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110011501161}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A5C71FC-1618-4262-9A8B-D8C50A725B24}SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Deal Slider-bg.exeSOFTWARE\Microsoft\Internet Explorer\Toolbar\{E13BF069-886E-416B-B532-6B14242CC508}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4607B39-174A-44BA-AB08-8892366ECA13}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011501161}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011501161}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Deal Slider-repairJobSOFTWARE\Wow6432Node\Deal SliderSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A5C71FC-1618-4262-9A8B-D8C50A725B24}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Deal Slider-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501161}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Deal Slider-repairJobSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\Deal Slider-repairJob

Additional Information

The following directories were created:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Deal Slider%LOCALAPPDATA%\Deal Slider%LocalAppData%\Google\Chrome\User Data\Default\Extensions\cedjfepdgjaoklgdjofjlajcabpbpgkn%ProgramFiles%\Deal Slider%ProgramFiles(x86)%\Deal Slider