CostMin

By JubileeX in Adware

Threat Scorecard

Ranking: 6,198
Threat Level: 20 % (Normal)
Infected Computers: 11,266
First Seen: October 1, 2013
Last Seen: September 19, 2023
OS(es) Affected: Windows

CostMin is an adware application that may display pop-up advertisements, sponsored links and coupons via a pop-up box on Amazon, Walmart, Ebay and other shopping websites that Internet users are visiting. CostMin pop-up advertisements may be illustrated as boxes, which carry a variety of coupons that are available or as underlined keywords, which when clicked may illustrate a pop-up advertisement that declares it is sent to the PC user by CostMin. CostMin is an add-on for Internet Explorer, Mozilla Firefox and Google Chrome that is usually inserted when PC users install another free software products, such as download-managers, video recording/streaming or PDF creators, that had packed into their installation CostMin. When computer users install these free applications, they may also install CostMin. While being installed, whenever the PC user will visit Expedia, Best Buy, Facebook or any other similar websites, CostMin will show a 'See Similar' button on product images, which when clicked may show pop-up ads by CostMin. CostMin may also display advertising banners on the websites that web users are visiting, and as they surf the Internet, CostMin may deliver coupons and other deals available on a variety of websites.

Aliases

5 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG Skodna.Generic.ALR
AhnLab-V3 Adware/Win32.MegaSearch
Avast Win32:MultiPlug-Y [PUP]
Symantec Adware.Popuppers
K7AntiVirus Riskware

SpyHunter Detects & Remove CostMin

File System Details

CostMin may create the following file(s):
# File Name MD5 Detections
1. 51e7c8673f01d.dll 05234975b085632d70d89c2f420c5107 494
2. costmin-setup.exe 9ad4c78dbfbf21ec2171d3bed89f2064 2
3. O7TNCz.dll dd786875d69cca863d57ef587d1cec39 1
4. epbobadpdjhmhnnokljfjbmjbjkkamic.crx 942a18653d728b8fb133a91eb9cbc811 0

Registry Details

CostMin may create the following registry entry or registry entries:
SOFTWARE\Classes\cosstminn.cosstminn
SOFTWARE\Classes\cosstminn.cosstminn.2.0
SOFTWARE\Classes\CostMin.CostMin
SOFTWARE\Classes\CostMin.CostMin.2.2
Software\Microsoft\Internet Explorer\Approved Extensions\{E3D96270-3848-E9D2-BB32-2211E57D4845}
Software\Microsoft\Internet Explorer\Approved Extensions\{E571864A-162D-550E-53BC-27325263C500}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1465BEC8-B8B8-E4C7-E8D6-CB7E7BD4B63E}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{41A77D0F-5250-66E1-513B-7249E6678B73}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{425BE9EF-F7AE-66A0-B8EE-57925882049D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{606D560D-93E6-4876-2FF8-D3A48F748F87}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{99AD76D0-5849-28B9-7C80-A1B8AA0D817F}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{9FCD5E96-8743-BD52-37CD-FEF09086CBE0}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{D33D8FDB-000E-9280-70AD-F4CF7F308B9D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{E3D96270-3848-E9D2-BB32-2211E57D4845}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{E571864A-162D-550E-53BC-27325263C500}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{FB171468-26F8-5C21-5D75-807F895D9317}
{2F5F003B-C71B-72E3-42B4-DE51AB079EB2}
{5F189DF5-2D05-472B-9091-84D9848AE48B}{be0fb33b}
{CE681A67-9477-CBE6-EB9D-FE534875F98D}

Directories

CostMin may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\cosstminn
%ALLUSERSPROFILE%\Application Data\costmin
%ALLUSERSPROFILE%\cosstminn
%ALLUSERSPROFILE%\costmin
%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\{1465BEC8-B8B8-E4C7-E8D6-CB7E7BD4B63E}
%PROGRAMFILES%\CostMin
%PROGRAMFILES%\cosstminn
%PROGRAMFILES(X86)%\cosstminn
%PROGRAMFILES(x86)%\CostMin
%Temp%\costmin
%appdata%\{E3D96270-3848-E9D2-BB32-2211E57D4845}

URLs

CostMin may call the following URLs:

cosstminn
costmin

Trending

Most Viewed

Loading...