DealEXpress

DealEXpress

Known Toolbar

by InstalleRex-WebPick

What is DealEXpress?

DealEXpress is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows Vista (SP2) with nearly ~99% of installations running this operating system. DealEXpress's installer is typically 905.00 KB in size and installs around 2 files.

DealEXpress is most popular in the United States with 83.33% of installations residing in this country.

About DealEXpress?

DealExpress is a browser extension designed to display additional advertisements within popular search engines such as Bing and Google on web browsers including Internet Explorer, Chrome, and Firefox. It operates as a background process and is categorized as adware due to its intrusive ad display behavior. Despite being listed in Add or Remove Programs, its removal may not entirely stop the ads from appearing. Once installed, DealExpress injects new ads into search results and various web pages that feature third-party advertising. The software utilizes the InstalleRex download manager from WebPicks Holdings for installation, a platform known for distributing potentially unwanted applications, including ad-supported extensions and browser toolbars. While DealExpress is a rebranded variant of existing adware known as SaveAs, SaveNShare, and DownloadKeeper, it includes many of the same components while attempting to mask its true origin.

Multiple virus scanners have detected malware in DealEXpress.

j_lbH73Cjp.dll (MD5: adfdd9859a2e253863ad2841ed8bb460) has been flagged by 10 scanners:
Scanner Software Result
AhnLab-V3 Adware/Win32.Graftor
Avira AntiVir ADWARE/Adware.Gen
AVG Generic_r.GU
Baidu-International Adware.Win32.MultiPlug.40
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.N
Fortinet FortiGate Riskware/MultiPlug
Malwarebytes PUP.Optional.MultiPlug.A
Rising Antivirus PE:Malware.Adware!6.1293
VIPRE Antivirus JustPlugIt (fs)
j_lbH73Cjp.exe (MD5: 113b8fc191b9149d08a92bb5914ff536) has been flagged by 22 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win32.Preloader
avast! Win32:Adware-gen [Adw]
AVG Generic_r
Baidu-International Adware.Win32.MegaSearch.aaU
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.K.gen
Fortinet FortiGate Adware/Megasearch
IKARUS anti.virus Win32.AdWare
K7 AntiVirus Adware
K7GW Adware ( 00490ca81 )
Kaspersky not-a-virus:AdWare.Win32.MegaSearch
Kingsoft AntiVirus Win32.Troj.MegaSearch.at.(kcloud)
Malwarebytes PUP.Optional.CRXDrop.A
McAfee PUP-FFY!113B8FC191B9
McAfee-GW-Edition Artemis!113B8FC191B9
Panda Antivirus Trj/Genetic.gen
Sophos Generic PUA JM
TrendMicro-HouseCall TROJ_GEN.R047H07A514
Vba32 AntiVirus BScope.Trojan.Agent
Avira AntiVir ADWARE/Adware.Gen
Rising Antivirus PE:Malware.Adware!6.1293
VIPRE Antivirus JustPlugIt (fs)

Software Details

URL:
Support:
Installation path:
C:\ProgramData\dealexpress
Uninstaller:
"C:\ProgramData\DealEXpress\j_lbH73Cjp.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
Size:
905.00 KB
Language:
English

DealEXpress Executable Details

Primary executable:
j_lbH73Cjp.exe
Name:
DealEXpress
Path:
C:\ProgramData\dealexpress\j_lbH73Cjp.exe
MD5:
113b8fc191b9149d08a92bb5914ff536
SHA-1:
SHA-256:
Files installed by DealEXpress
File Type Filename MD5
DLL
adfdd9859a2e253863ad2841ed8bb460
EXE
113b8fc191b9149d08a92bb5914ff536