NextCoup

By GoldSparrow in Adware

Threat Scorecard

Ranking: 10,242
Threat Level: 20 % (Normal)
Infected Computers: 8,721
First Seen: March 10, 2014
Last Seen: September 18, 2023
OS(es) Affected: Windows

NextCoup is adware which may be downloaded from the Internet when the computer user downloads various freeware from suspicious download websites. NextCoup may result in a variety of system issues when it is downloaded and installed on the PC. The computer user may allow NextCoup to be downloaded on the PC when he is downloading other free software from the Internet, or he may download NextCoup inadvertently by not paying enough attention to the installation process of the free program. When the PC user downloads any free application from the Internet and does not read the download agreement carefully, he may not be aware of what other potentially unwanted apps may come bundled with the particular free tool he is downloading. Once downloaded and installed, NextCoup may display random pop-up ads and banners on the computer. NextCoup may take over the Web browser and result in annoying diversions to various questionable websites.

SpyHunter Detects & Remove NextCoup

File System Details

NextCoup may create the following file(s):
# File Name MD5 Detections
1. Dsl2Wz5.exe badcc3144b3e14cdaa667c2755a4c15b 2
2. vQC.dll 5ed7513676855dffaf505331c569b5f8 2
3. mbp9q9y.dll b37dba87768ec331040d1373d8720373 1
4. mQDXKyIBms.dll ae5d157111b2765f27b3cf8e5330fde6 1
5. vL9aj73a.dll 4831cd6281dad5758c1d19f52a2ff9a8 1
6. ek.dll f259225ce1d4a6426da55d6f8006a138 1
7. 2.dll 1304138dbd07bd43cec354b95849cb01 1

Registry Details

NextCoup may create the following registry entry or registry entries:
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\OpenWithProgids\NexTCouP
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{156A0BE8-AB57-A221-0FBF-C45DB259EDCD}

Directories

NextCoup may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\NextCoup
%ALLUSERSPROFILE%\NextCoup
%PROGRAMFILES%\NextCoiup
%PROGRAMFILES%\NextCoup
%PROGRAMFILES(x86)%\NextCoiup
%PROGRAMFILES(x86)%\NextCoup

URLs

NextCoup may call the following URLs:

NextCOup
NextCouP

Trending

Most Viewed

Loading...