DealEXpress
What is DealEXpress?
DealEXpress is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows Vista (SP2) with nearly ~99% of installations running this operating system. DealEXpress's installer is typically 905.00 KB in size and installs around 2 files.
DealEXpress is most popular in the United States with 83.33% of installations residing in this country.
About DealEXpress?
DealExpress is a browser extension designed to display additional advertisements within popular search engines such as Bing and Google on web browsers including Internet Explorer, Chrome, and Firefox. It operates as a background process and is categorized as adware due to its intrusive ad display behavior. Despite being listed in Add or Remove Programs, its removal may not entirely stop the ads from appearing. Once installed, DealExpress injects new ads into search results and various web pages that feature third-party advertising. The software utilizes the InstalleRex download manager from WebPicks Holdings for installation, a platform known for distributing potentially unwanted applications, including ad-supported extensions and browser toolbars. While DealExpress is a rebranded variant of existing adware known as SaveAs, SaveNShare, and DownloadKeeper, it includes many of the same components while attempting to mask its true origin.
Multiple virus scanners have detected malware in DealEXpress.
| Scanner Software | Version | Result |
|---|---|---|
| AhnLab-V3 | 2014.01.10.00 | Adware/Win32.Graftor |
| Avira AntiVir | 7.11.124.138 | ADWARE/Adware.Gen |
| AVG | 13.0.0.3169 | Generic_r.GU |
| Baidu-International | 3.5.1.41473 | Adware.Win32.MultiPlug.40 |
| Comodo Security | 17584 | ApplicUnwnt |
| ESET-NOD32 | 9272 | a variant of Win32/AdWare.MultiPlug.N |
| Fortinet FortiGate | 5.1.147.0 | Riskware/MultiPlug |
| Malwarebytes | 1.75.0.1 | PUP.Optional.MultiPlug.A |
| Rising Antivirus | 25.0.0.11 | PE:Malware.Adware!6.1293 |
| VIPRE Antivirus | 25278 | JustPlugIt (fs) |
| Scanner Software | Version | Result |
|---|---|---|
| AhnLab-V3 | 2014.01.10 | Trojan/Win32.Preloader |
| avast! | 2014.9-140126 | Win32:Adware-gen [Adw] |
| AVG | 2015.0.3582 | Generic_r |
| Baidu-International | 4.0.3.14126 | Adware.Win32.MegaSearch.aaU |
| Comodo Security | 17583 | ApplicUnwnt |
| ESET-NOD32 | 8.9272 | a variant of Win32/AdWare.MultiPlug.K.gen |
| Fortinet FortiGate | 1/26/2014 | Adware/Megasearch |
| IKARUS anti.virus | t3scan.2.2.29 | Win32.AdWare |
| K7 AntiVirus | 13.175.10794 | Adware |
| K7GW | 13.175.10794 | Adware ( 00490ca81 ) |
| Kaspersky | 14.0.0.4407 | not-a-virus:AdWare.Win32.MegaSearch |
| Kingsoft AntiVirus | 331020.49267 | Win32.Troj.MegaSearch.at.(kcloud) |
| Malwarebytes | v2014.01.26.03 | PUP.Optional.CRXDrop.A |
| McAfee | 5600.7238 | PUP-FFY!113B8FC191B9 |
| McAfee-GW-Edition | 7.7238 | Artemis!113B8FC191B9 |
| Panda Antivirus | 14.01.26.03 | Trj/Genetic.gen |
| Sophos | 4.96 | Generic PUA JM |
| TrendMicro-HouseCall | 7.2.26 | TROJ_GEN.R047H07A514 |
| Vba32 AntiVirus | 3.12.24.3 | BScope.Trojan.Agent |
| Avira AntiVir | 7.11.124.138 | ADWARE/Adware.Gen |
| Rising Antivirus | 25.0.0.11 | PE:Malware.Adware!6.1293 |
| VIPRE Antivirus | 25278 | JustPlugIt (fs) |
Software Details
- URL:
- –
- Support:
- –
- Installation path:
- C:\ProgramData\dealexpress
- Uninstaller:
- "C:\ProgramData\DealEXpress\j_lbH73Cjp.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
- Size:
- 905.00 KB
- Language:
- English
DealEXpress Executable Details
- Primary executable:
- j_lbH73Cjp.exe
- Name:
- DealEXpress
- Path:
- C:\ProgramData\dealexpress\j_lbH73Cjp.exe
- MD5:
- 113b8fc191b9149d08a92bb5914ff536
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
DLL
|
j_lbH73Cjp.dll
Malware
|
adfdd9859a2e253863ad2841ed8bb460 |
|
EXE
|
j_lbH73Cjp.exe
Malware
|
113b8fc191b9149d08a92bb5914ff536 |