Threat Database Adware ReadyCoupon

ReadyCoupon

By GoldSparrow in Adware

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 1
First Seen: May 22, 2015
Last Seen: June 27, 2020
OS(es) Affected: Windows

ReadyCoupon is a PUP or Potentially Unwanted Program. ReadyCoupon is developed by InstalleRex-WebPick, a known developer of PUPs, adware, and similar components. ReadyCoupon is a low-quality Web browser extension that may be bundled with other software as a way for software creators to generate revenue from their free programs. ReadyCoupon has several components that may work together to create an irritating experience for computer users.

ReadyCoupon may be bundled with other adware and may be part of larger packages of PUPs. ReadyCoupon has several components, including a component that starts automatically when Window starts up, a Windows service that uses system resources, and a Web browser extension designed to insert numerous advertisements on websites viewed on the affected Web browser. ReadyCoupon is designed to inject all kinds of advertisements into other Web pages, including banner advertisements and pop-up advertisements. ReadyCoupon also can replace text on Web pages with hyperlinks that lead to Web pages associated with ReadyCoupon. One feature of ReadyCoupon that may not be present in other adware; ReadyCoupon can inject affiliate codes into links that may take the form of coupon offers, generating affiliate marketing traffic and revenue.

ReadyCoupon Creates Various Files on Your PC

ReadyCoupon's files have randomly generated names and may be installed in the Program Files folder as well as in the ProgramData directory. One of the main problems with content delivered by ReadyCoupon is that its many Web browser plug-ins and advertisements may promote known tactics and may ask computer users to download fake updates or to call technical support numbers connected to known misleading tactics. PUPs like ReadyCoupon may result in additional PUP infections, exposure to threats, and often exposure to known online tactics. To make these more effective, ReadyCoupon may alter the affected Web browser's security settings automatically.

The main executable file associated with withReadyCoupon is ReadyCoupon.exe. Since ReadyCoupon is part of the WebPick InstalleRex, this means that ReadyCoupon may have a high likelihood of installing other PUPs also distributed using this component. Despite being touted as 'optional' content, computer users may be opted in automatically, and opting out of ReadyCoupon may require extra steps such as using custom or advanced installation. Malware analysts strongly advise computer users to avoid ReadyCoupon. Although considered a PUP by most PC security researchers, some security applications may label ReadyCoupon as a Trojan or other threat. This is not unexpected; one of the trademarks of PUPs like ReadyCoupon is that they behave like threats in many ways, despite being less destructive than Trojans, viruses and other threatening components.

Dealing with ReadyCoupon

ReadyCoupon should be removed immediately. As has been noted previously, ReadyCoupon is installed both as a Windows service and start-up application apart from its Web browser extension, plug-in or add-on. Because of this, using the Web browser's extension manager may not be enough to remove ReadyCoupon and similar PUPs. A reliable security application that is fully up-to-date should be used to perform full scans of the affected computer (make sure that your security software is capable of detecting and removing PUPs and other low-level threats). It may be necessary to use the Windows Control Panels, under the 'Add and Remove Programs' feature, to delete PUPs like ReadyCoupon. It also may be necessary to restore changes made to the affected Web browser's and computer's settings manually (for example, ReadyCoupon may have changed the affected Web browser's default search engine and homepage).

File System Details

ReadyCoupon may create the following file(s):
# File Name MD5 Detections
1. C:\Program Files\readycoupon\ReadyCoupon.exe 79f9311ac6a5009fef1a5756a0a529d3
2. C:\Program Files\ReadyCoupon\ReadyCoupon.exe" /s /n /C:"ExecuteCommands;UninstallCommands"

Trending

Most Viewed

Loading...