84,488,480 programs installed

Should I remove Slick Savings?

What percent of users and experts removed it?
85% remove it15% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #2,346
United States Rank #3,534
Reach 0.2702%
Lifespan of installation (until removal)
< 24.09 days
710.73 days >
Average installed length: 373.43 days

Versions

VersionDistribution
1.3 75.51%
1.1 15.87%
1.0 8.62%

Slick Savings

What is Slick Savings?

Slick Savings is an ad-supported (users may see additional banner, search, pop-up, pop-under, interstitial and in-text link advertisements) cross web browser plugin for Internet Explorer (BHO) and Firefox/Chrome (plugin) and distributed through various monetization platforms during installation. The browser extension includes various features that will modify the default or custom settings of the browser including the home page, search settings and in some cases will modify Internet Explorer's load time threshold, place a lock file within Firefox to prevent competing software from changing its settings as well as disable the browser's Content Security Policy in order to allow for cross site scripting of the plugin.

Overview

The most used version is 1.3, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a Browser Helper Object (BHO) to Internet Explorer. The main program executable is Coupons.dll. Typically most users end up uninstalling this just after a few days. The software installer includes 13 files and is usually about 1.26 MB (1,326,198 bytes).
  • Possible malware installed by this program
  • Automatically starts with Windows
  • Loads into the web browser
  • Typically distributed through a pay-per-install bundle
  • Injects advertisements unassociated with the underlying web page
  • Hijacks the web browser's home page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Slick Savings.
CouponsHelper.exe (4e0c1b50bb360cf1c26eea7a56cc68d6) has been flagged by the following 4 scanners:
Anti-Virus softwareVersionDetection
Avira AntiVir 7.11.138.220 TR/Trash.Gen
Dr.Web 9.0.0.0325 Trojan.Damaged.1
SUPERAntiSpyware 10225 Trojan.Agent/Gen-Nullo[Short]
Symantec 11/21/2014 rev. 6 Bloodhound.MalPE
Coupons.dll (6ead5964c03cf5657096ccb2487c7a62) has been flagged by the following 4 scanners:
Anti-Virus softwareSoftware versionDetection
Avira AntiVir 7.11.142.214 TR/Trash.Gen
Dr.Web 7.00.8.02260 Trojan.Damaged.1
SUPERAntiSpyware 5.6.0.1032 Trojan.Agent/Gen-Nullo[Short]
Symantec 20131.1.5.61 Bloodhound.MalPE
Coupons64.dll (e677fed3f71b0571434b253426d657f0) has been flagged by the following 2 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.11.02.00 PUP/Win32.Toolbar
Dr.Web 7.0.10.8210 Adware.Toolbar.335
Slick Savings has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

URL: www.spigot.com
Installation folder: C:\users\user\appdata\Roaming\Slick Savings\
Uninstaller: "C:\users\user\appdata\Roaming\Slick Savings\uninstall.exe"
Estimated size: 1.26 MB

Program filesFiles installed by Slick Savings

Program module:Coupons.dll
Name:Slick Savings
Slick Savings for Internet Explorer
Path:C:\users\user\appdata\Roaming\Slick Savings\Coupons.dll
MD5:6b1a43ff810aaceb2dc7cfa541e89cf3
Additional files:
  • Button.exe - Browser Extensions (Browser Extensions for Internet Explorer)
  • Button64.exe
  • ButtonWrap.dll
  • ButtonWrap64.dll
  • (Malware detected) coupons.dll
  • Coupons64.dll
  • CouponsHelper.exe - Browser Extensions Helper
  • Uninstall.exe - Browser Extensions setup launcher

Program behaviorsBehaviors exhibited

2 Internet Explorer BHOs
  • Coupons64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Slick Savings' with the class of {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}.
  • Coupons.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Slick Savings' with the class of {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}.
Startup File (User Run)
  • CouponsHelper.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Browser Extensions' and executes as "C:\users\user\appdata\Roaming\Slick Savings\CouponsHelper.exe".
Startup File (All Users Run)
  • CouponsHelper.exe is loaded in the all users (HKLM) registry as a startup file name 'Slick Savings' which loads as "C:\users\user\appdata\Roaming\Slick Savings\CouponsHelper.exe".

How do I remove Slick Savings?

You can uninstall Slick Savings from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Slick Savings, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Slick Savings.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Slick Savings you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 57%
Win 10 0%
 
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
 
USER ACTIONS
Uninstall it 85%
Keep it 15%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 63.95%
Windows 10 24.72%
Windows XP 6.59%
Windows Vista 4.75%
Which OS releases does it run on?
Windows 7 Home Premium 30.60%
Windows 7 Ultimate 19.57%
Windows 7 Professional 10.11%
Windows 8.1 8.62%
Microsoft Windows XP 6.43%
Windows 8.1 Pro 4.20%

Distribution by countryGeography

32.04% of installs come from the United States
Which countries install it?
  United States 32.04%
  Germany 11.83%
  United Kingdom 4.94%
  MA 4.15%
  Canada 3.15%
  Italy 2.59%
  DZ 2.30%
  Brazil 2.26%
  IQ 2.19%
  Australia 1.88%
  Finland 1.65%
  Czech Republic 1.59%
  Egypt 1.54%
  Saudi Arabia 1.49%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 26.70%
Acer 19.61%
Dell 18.40%
ASUS 8.68%
Toshiba 6.98%
GIGABYTE 5.86%
Samsung 5.09%
Lenovo 3.74%
Medion 2.83%
Intel 1.24%
American Megatrends 0.88%
Common models
HP Pavilion dv6 Notebook ... 6.73%
HP Pavilion g6 Notebook P... 6.41%
HP Pavilion dv7 Notebook ... 4.49%
Dell Inspiron N5110 2.88%
Dell Inspiron 3521 2.56%
HP G62 Notebook PC 2.48%

About (from Spigot, Inc.)

Keep your customers coming back and delight them with contextually relevant content and applications.
Publisher URL: www.spigot.com

comments4 comments

user comment
user comment
Nickover a year ago
Came across it in my control panel when trying to find out what something called searchsettings.exe was doing there eating up cpu. That turned out to come from spigot - same as this. Shady practices like this waste loads of time for people with a bit of technical understanding. The rest get shafted and probably blame microsoft for their pc going slower than it used to.
user comment
Tiituliover a year ago
Slick Savings was also bundled with IObit Driver Booster. It is a bad decision of IObit to let it be installed without user decision and user's may want to remove also the Driver Booster, because they cannot be sure what else unwanted may have been installed without permission!
user comment
Mehover a year ago
This crapware was bundled with Onyx (Mac config software), downloaded from cnet (otherwise known as download.com). When asked, I opted out of installing it, but it went ahead and installed it anyways. You have to really wonder about a company that asks you if you want to install their software, and then installs it anyways. And shame on C/Net for enabling this. They used to be trustworthy, but now I see that they have sold out their customers like every other tech company.
expert comment
AdwareBuster (Expert)over a year ago
Distribuited and bundled with software from ISfreemium's Free YouTube Downloader and Greentree's YTD Video Downloader through the Download.com enhanced installer.