NCupons

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Ranking:	5,417
Threat Level:	20 % (Normal)
Infected Computers:	30,156

First Seen:	March 24, 2015
Last Seen:	April 5, 2024
OS(es) Affected:	Windows

The NCupons browser tool is advertised to help you efficiently navigate through online shops and gain access to exclusive deals, but security analysts deem NCupons as a Potentially Unwanted Program (PUP). NCupons is considered as a PUP because it executes an aggressive advertisement campaign in your web client via using a Browser Helper Object, an add-on, and a browser extension. The 'Terms of Use' agreement of the NCupons app reveals that NCupons can display numerous coupons, commercials, banners, discounts and pop-ups when you chose to install it. However, most users install NCupons as a drive-by installation of freeware that they handled through the 'Express' or 'Typical' option. The NCupons app is programmed to read the metadata of pages you browse and the search terms you enter in order to generate tailor-suited ads. Needless to say, many web surfers might not like the functionality of NCupons if they want to keep their online habits to themselves. Moreover, the ads by NCupons may cover your browser surface and became a nuisance to your Internet activities. You can choose to install a trusted anti-spyware utility to purge all files associated with NCupons from your PC.

Table of Contents

SpyHunter Detects & Remove NCupons

File System Details

NCupons may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	viva.exe	5ade3a92dd5e9627ab41c427af8eb154	2,948
Name: viva.exe MD5: 5ade3a92dd5e9627ab41c427af8eb154 Size: 346.62 KB (346624 bytes) Detections: 2,948 Type: Executable File Path: C:\Program Files (x86)\Viva\viva.exe Group: Malware file Last Updated: September 12, 2023
2.	viva.exe	80f1f237367428a5bd47e21461988099	1,867
Name: viva.exe MD5: 80f1f237367428a5bd47e21461988099 Size: 346.62 KB (346624 bytes) Detections: 1,867 Type: Executable File Path: C:\Program Files (x86)\Viva\viva.exe Group: Malware file Last Updated: April 5, 2024
3.	ncupons.exe	8e6daecd7ff082c0c9d24ccd9d009d61	1,013
Name: ncupons.exe MD5: 8e6daecd7ff082c0c9d24ccd9d009d61 Size: 2.21 MB (2218256 bytes) Detections: 1,013 Type: Executable File Path: C:\Ezequiel 08.03.18\Program Files (x86)\RBM\NCupons\ncupons.exe Group: Malware file Last Updated: December 22, 2021
4.	ncupons.exe	2c07f39f40ce513a19c3448942c27407	573
Name: ncupons.exe MD5: 2c07f39f40ce513a19c3448942c27407 Size: 2.21 MB (2217744 bytes) Detections: 573 Type: Executable File Path: c:\program files\rbm\ncupons\ncupons.exe Group: Malware file Last Updated: August 26, 2022
5.	ncupons.exe	403dbe4525673e313c4a7fe2364d45cc	357
Name: ncupons.exe MD5: 403dbe4525673e313c4a7fe2364d45cc Size: 2.21 MB (2214672 bytes) Detections: 357 Type: Executable File Path: C:\Users\<username>\Desktop\12461\Backup\Arquivos de programas\RBM\NCupons\ncupons.exe Group: Malware file Last Updated: July 20, 2022
6.	viva.exe	9c364b17993fdb5e1b39ea21f336fcde	235
Name: viva.exe MD5: 9c364b17993fdb5e1b39ea21f336fcde Size: 356.64 KB (356640 bytes) Detections: 235 Type: Executable File Path: C:\Program Files (x86)\Viva\viva.exe Group: Malware file Last Updated: May 13, 2022
7.	viva.exe	c6b441a7e2a50f159326547e2f76fa74	158
Name: viva.exe MD5: c6b441a7e2a50f159326547e2f76fa74 Size: 348.67 KB (348672 bytes) Detections: 158 Type: Executable File Path: %PROGRAMFILES%\Viva Group: Malware file Last Updated: December 1, 2018
8.	ncupons.exe	1e3e63826a7e62d7f7a41b26ff098c55	137
Name: ncupons.exe MD5: 1e3e63826a7e62d7f7a41b26ff098c55 Size: 2.21 MB (2216208 bytes) Detections: 137 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: April 24, 2015
9.	ncupons.exe	d189621e2fec97af3ba7f9e38fd79403	137
Name: ncupons.exe MD5: d189621e2fec97af3ba7f9e38fd79403 Size: 2.21 MB (2217744 bytes) Detections: 137 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: April 24, 2015
10.	ncupons.exe	33c5cc15d863c84aaba51595c2c383b3	117
Name: ncupons.exe MD5: 33c5cc15d863c84aaba51595c2c383b3 Size: 2.21 MB (2214672 bytes) Detections: 117 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: April 24, 2015
11.	ncupons.exe#C641E7461FDE6F7E	972f19123fe20d1b1cf97e93fa9d207a	86
Name: ncupons.exe#C641E7461FDE6F7E MD5: 972f19123fe20d1b1cf97e93fa9d207a Size: 2.21 MB (2216720 bytes) Detections: 86 Path: C:\AdwCleaner\Quarantine\v1\20200810.114405\116\RBM\NCupons\ncupons.exe#C641E7461FDE6F7E Group: Malware file Last Updated: November 11, 2021
12.	ncupons.exe	c0e05437181be13521aef45c4fd863a8	76
Name: ncupons.exe MD5: c0e05437181be13521aef45c4fd863a8 Size: 2.21 MB (2218256 bytes) Detections: 76 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: April 24, 2015
13.	ncupons.exe	137e11d45b8dcfd9a1f8ff30f42b85f4	48
Name: ncupons.exe MD5: 137e11d45b8dcfd9a1f8ff30f42b85f4 Size: 2.21 MB (2218256 bytes) Detections: 48 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: April 24, 2015
14.	ncupons.exe	03c08a91b7eb1a3b106f49281ccbf4e7	37
Name: ncupons.exe MD5: 03c08a91b7eb1a3b106f49281ccbf4e7 Size: 2.21 MB (2218256 bytes) Detections: 37 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: April 24, 2015
15.	ncupons.exe	00ce38be9b01115425bf36c12f2bfd3f	21
Name: ncupons.exe MD5: 00ce38be9b01115425bf36c12f2bfd3f Size: 2.21 MB (2217744 bytes) Detections: 21 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: April 24, 2015
16.	ncupons.exe	84550dc9e0c5d6d715d665f8471ae4f4	19
Name: ncupons.exe MD5: 84550dc9e0c5d6d715d665f8471ae4f4 Size: 2.21 MB (2216208 bytes) Detections: 19 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
17.	ncupons.exe	69c821165f2acfd063cae093ad9d4d11	5
Name: ncupons.exe MD5: 69c821165f2acfd063cae093ad9d4d11 Size: 2.21 MB (2216720 bytes) Detections: 5 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
18.	ncupons.exe	5120d2f9aeff77b39a750d86ced45bbb	4
Name: ncupons.exe MD5: 5120d2f9aeff77b39a750d86ced45bbb Size: 2.21 MB (2216720 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
19.	ncupons.exe	d52448018954194ddc2ac351117eb324	4
Name: ncupons.exe MD5: d52448018954194ddc2ac351117eb324 Size: 2.21 MB (2216720 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: June 13, 2020
20.	ncupons.exe	08b0c7518528ebd3adf4175149e8ca6a	3
Name: ncupons.exe MD5: 08b0c7518528ebd3adf4175149e8ca6a Size: 2.01 MB (2017552 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: April 29, 2020
21.	ncupons.exe	02b0db958a172caf955942229f9d990c	3
Name: ncupons.exe MD5: 02b0db958a172caf955942229f9d990c Size: 2.21 MB (2216720 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: February 19, 2020
22.	ncupons.exe	adc7fa52ea0220f7d2f82c95f74f49e0	2
Name: ncupons.exe MD5: adc7fa52ea0220f7d2f82c95f74f49e0 Size: 2.21 MB (2217744 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
23.	ncupons.exe	eaf1e1172d79ff77b6c05490e6aaaf49	2
Name: ncupons.exe MD5: eaf1e1172d79ff77b6c05490e6aaaf49 Size: 2.21 MB (2216720 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
24.	ncupons.exe	947c5659a234113daec5a2afed050d93	1
Name: ncupons.exe MD5: 947c5659a234113daec5a2afed050d93 Size: 2.21 MB (2217744 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
25.	ncupons.exe	afcc05807e6d95dd4675edd81fb18ff0	1
Name: ncupons.exe MD5: afcc05807e6d95dd4675edd81fb18ff0 Size: 2.21 MB (2218256 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES(x86)%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
26.	ncupons.exe	5dfdeaf755ca9b1a43e83bde7800b613	1
Name: ncupons.exe MD5: 5dfdeaf755ca9b1a43e83bde7800b613 Size: 2.21 MB (2216720 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017
27.	ncupons.exe	68603bb3b9bbb6e56177ecb0ffc441f6	1
Name: ncupons.exe MD5: 68603bb3b9bbb6e56177ecb0ffc441f6 Size: 2.21 MB (2216720 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\RBM\NCupons Group: Malware file Last Updated: June 16, 2017

Registry Details

NCupons may create the following registry entry or registry entries:

Regexp file mask

%WINDIR%\System32\drivers\cashnbackdrv.sys

%WINDIR%\System32\drivers\lmservicedrv.sys

%WINDIR%\System32\drivers\ncuponsdrv.sys

%WINDIR%\System32\drivers\vivadrv.sys

HKEY..\..\..\..{RegistryKeys}

SOFTWARE\NCupons

SOFTWARE\Wow6432Node\NCupons

SYSTEM\ControlSet001\Enum\Root\LEGACY_NCUPONSDRV

SYSTEM\ControlSet001\Enum\Root\LEGACY_VIVADRV

SYSTEM\ControlSet001\Services\COMLiveService

SYSTEM\ControlSet001\Services\NCupons Application

SYSTEM\ControlSet001\Services\ncuponsdrv

SYSTEM\ControlSet001\services\NSCP Service

SYSTEM\ControlSet001\services\nscp_cnb

SYSTEM\ControlSet001\Services\vivadrv

SYSTEM\ControlSet002\Enum\Root\LEGACY_NCUPONSDRV

SYSTEM\ControlSet002\Enum\Root\LEGACY_VIVADRV

SYSTEM\ControlSet002\Services\COMLiveService

SYSTEM\ControlSet002\Services\NCupons Application

SYSTEM\ControlSet002\Services\ncuponsdrv

SYSTEM\ControlSet002\services\NSCP Service

SYSTEM\ControlSet002\services\nscp_cnb

SYSTEM\ControlSet002\Services\vivadrv

SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NCUPONSDRV

SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VIVADRV

SYSTEM\CurrentControlSet\Services\COMLiveService

SYSTEM\CurrentControlSet\Services\NCupons Application

SYSTEM\CurrentControlSet\Services\ncuponsdrv

SYSTEM\CurrentControlSet\services\NSCP Service

SYSTEM\CurrentControlSet\services\nscp_cnb

SYSTEM\CurrentControlSet\Services\vivadrv

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

NCupons

nscp_cnb

{15436961-4543-4CA2-ACBF-0B5C73D9E737}_is1

Directories

NCupons may create the following directory or directories:

%PROGRAMFILES%\RBM\CashNBack

%PROGRAMFILES%\RBM\NCupons

%PROGRAMFILES%\nscp

%PROGRAMFILES(x86)%\RBM\CashNBack

%PROGRAMFILES(x86)%\RBM\NCupons

%PROGRAMFILES(x86)%\nscp

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

NCupons

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove NCupons

File System Details

Registry Details

Directories

Submit Comment

Trending

Venanco.com Scam

Sceplondelling.co.in

Ytgoconverter.com

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?