Coupon Alert Toolbar

Coupon Alert Toolbar Description

Screenshot

Is the Coupon Alert Toolbar Add-on Considered Malware?

According to ESG team of PC security researchers, Coupon Alert Toolbar is not technically malware. However, this browser add-on exhibits some tendencies that, at best, make it an undesirable program to have installed on your computer. Commonly known as badware, these types of applications are closely associated with more dangerous malware infections. Programs like Coupon Alert Toolbar also have certain behaviors that can adversely affect your computer in several ways. ESG team of computer security researchers recommends removing the Coupon Alert Toolbar browser add-on from your computer. Running an in-depth scan of your computer after removing Coupon Alert Toolbar is also recommended.

The Coupon Alert Toolbar Add-on Can Have Several Undesirable Behaviors

Coupon Alert Toolbar is a toolbar for the Internet Explorer browser. Coupon Alert displays a toolbar that supposedly displays coupon alerts whenever a new special offer is found, or when the computer user visits retail websites. The Coupon Alert Toolbar add-on is heavily promoted online as a legitimate shopping tool. In fact, it has a very strong search engine presence. There are strong signs of both SEO and reverse SEO involved with the promotion of Coupon Alert Toolbar (these terms refer to Search Engine Optimization: the practice of writing content designed to appear high on search engine results, or to push negative reviews of Coupon Alert Toolbar down). The Coupon Alert Toolbar can also be installed along with certain freeware and shareware applications, often without the knowledge of the computer user that is installing them. While the Coupon Alert Toolbar does do what it claims, it also has certain behaviors that are associated with malware. For example, it can redirect your web browsing, display unwanted ads that may contain malware, and even alter your search engine results so that the websites it promotes show up higher in the results.

Computer Problems that are Related to the Coupon Alert Toolbar Add-on

ESG team of malware analysts recommends avoiding any program that forces you to install the Coupon Alert Toolbar. This add-on can cause several problems on your computer. Some of these problems include the following:

  • The Coupon Alert Toolbar add-on runs in the background without your knowledge, starting and stopping file processes without your authorization.
  • The Coupon Alert Toolbar add-on can use up system resources and bandwidth, making your Internet connection and computer's performance noticeably slower.
  • The Coupon Alert Toolbar add-on has the capacity to store information about your browsing habits and online activity.
Aliases: Win32.Malware.Heur_Generic.B.(kcloud), TROJ_GEN.R4FH1IL, Riskware.Win32.FunWeb.chwru, TROJ_GEN.RC1H1DE, not-a-virus:WebToolbar.Win32.MyWebSearch.tyq [Kaspersky], Win32:FunWeb-K [PUP] [Avast], Adware.Funweb-12 [ClamAV], Win32:PUP-gen [PUP] [Avast], MyWebSearch.J (v) (not malicious), Tool.InstallToolbar.5 [DrWeb], Win32:FunWeb-F [PUP] [Avast], Artemis!5AFBF0822A13 [McAfee], Trojan-Clicker/W32.FunWeb.702464, Win32.Trojan [eSafe] and probably a variant of Win32/Adware.Softomate.AD [NOD32].

Technical Information

File System Details

Coupon Alert Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\CouponAlert_2p\bar\1.bin\2pbarsvc.exe 28,766 0ddfb42668042b93298b4e1a1a49ea86 3,266
2 %PROGRAMFILES%\CouponAlert_2p\bar\1.bin\2pbrmon.exe 20,480 d187bd7494d9250921cdfc80da557636 2,916
3 %PROGRAMFILES%\CouponAlert_2p\bar\1.bin\2pSrcAs.dll 53,248 635999beb7443c8ae6bc2563855b3314 2,234
4 %PROGRAMFILES%\CouponAlert_2p\bar\1.bin\2pbar.dll 684,032 44e666c4ceb04862b3d8874d546df311 2,218
5 %PROGRAMFILES%\CouponAlert_2p\bar\1.bin\2pmedint.exe 20,598 1647e8afc7506772a78a4ec852883278 8
6 %PROGRAMFILES%\CouponAlert_2p\bar\setups\Coupon Alert Installer(0006e060).exe 90,230 23a41dabcb6e1c4da1f48d451c7cefff 2
7 %PROGRAMFILES%\CouponAlert_2p\bar\1.bin\2pSrchMn.exe 42,536 c76414d0e3482c7658a0b937ffc458c2 2
8 %LOCALAPPDATA%\CouponAlert_2p\gktzywdu.dll 753,664 04f20418c3e3e008160ab8ed74a9c646 1
9 C:\Program Files\CouponAlert_2p\bar\1.bin\2pbarsvc.exe N/A
10 C:\Program Files\CouponAlert_2p\bar\1.bin\2phighin.exe N/A
11 C:\Program Files\CouponAlert_2p\bar\1.bin\2pdatact.dll N/A
12 C:\Program Files\CouponAlert_2p\bar\1.bin\2pbar.dll N/A
13 C:\Program Files\CouponAlert_2p\bar\1.bin\2phttpct.dll N/A
14 C:\Program Files\CouponAlert_2p\bar\1.bin\2pregiet.dll N/A
15 C:\Program Files\CouponAlert_2p\bar\1.bin\2pregfft.dll N/A
16 C:\Program Files\CouponAlert_2p\bar\1.bin\2pscript.dll N/A
17 C:\Program Files\CouponAlert_2p\bar\1.bin\2pSrcAs.dll N/A
18 C:\Program Files\CouponAlert_2p\bar\1.bin\NP2pStub.dll N/A
19 C:\Program Files\CouponAlert_2p\bar\1.bin\2pmedint.exe N/A
20 C:\Program Files\CouponAlert_2p\bar\1.bin\2pimpipe.exe N/A
21 C:\Program Files\CouponAlert_2p\bar\1.bin\2pdlghk.dll N/A
22 C:\Program Files\CouponAlert_2p\bar\1.bin\2pfeedmg.dll N/A
23 C:\Program Files\CouponAlert_2p\bar\1.bin\2phtmlmu.dll N/A
24 C:\Program Files\CouponAlert_2p\bar\1.bin\2pieovr.dll N/A
25 C:\Program Files\CouponAlert_2p\bar\1.bin\2pmlbtn.dll N/A
26 C:\Program Files\CouponAlert_2p\bar\1.bin\2pradio.dll N/A
27 C:\Program Files\CouponAlert_2p\bar\1.bin\2pskplay.exe N/A
28 C:\Program Files\CouponAlert_2p\bar\1.bin\2puabtn.dll N/A
29 C:\Program Files\CouponAlert_2p\bar\1.bin\2pauxstb.dll N/A
30 C:\Program Files\CouponAlert_2p\bar\1.bin\2pbrmon.exe N/A
31 C:\Program Files\CouponAlert_2p\bar\1.bin\2pbrstub.dll N/A
32 C:\Program Files\CouponAlert_2p\bar\1.bin\2pdyn.dll N/A
33 C:\Program Files\CouponAlert_2p\bar\1.bin\2phtml.dll N/A
34 C:\Program Files\CouponAlert_2p\bar\1.bin\2pidle.dll N/A
35 C:\Program Files\CouponAlert_2p\bar\1.bin\2pmsg.dll N/A
36 C:\Program Files\CouponAlert_2p\bar\1.bin\2pPlugin.dll N/A
37 C:\Program Files\CouponAlert_2p\bar\1.bin\2pskin.dll N/A
38 C:\Program Files\CouponAlert_2p\bar\1.bin\2ptpinst.dll N/A
39 C:\Program Files\CouponAlert_2p\bar\1.bin\T8RES.DLL N/A
40 C:\Program Files\CouponAlert_2p\bar\1.bin N/A
41 C:\Program Files\CouponAlert_2p\bar\1.bin\LOGO.BMP N/A
42 C:\Program Files\CouponAlert_2p\bar\Cache\00074EE9 N/A
43 C:\Program Files\CouponAlert_2p\bar\Cache\0007A46B.bmp N/A
44 C:\Program Files\CouponAlert_2p\bar\Cache\000756C8.bmp N/A
45 C:\Program Files\CouponAlert_2p\bar\Cache\00075D02.bmp N/A
46 C:\Program Files\CouponAlert_2p\bar\1.bin\chrome\2pffxtbr.jar N/A
47 C:\Program Files\CouponAlert_2p\bar\Settings\s_w1.dat N/A
48 C:\Program Files\CouponAlert_2p\CouponAlert_2p N/A
49 C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\CouponAlertBtn.html N/A
50 C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\PopupProperties100064904.html N/A
51 C:\Program Files\CouponAlert_2p\bar N/A
52 C:\Program Files\CouponAlert_2p\bar\1.bin\INSTALL.RDF N/A
53 C:\Program Files\CouponAlert_2p\bar\Message\COMMON.T8S N/A
54 C:\Program Files\CouponAlert_2p\bar\Cache\00075BE9.bmp N/A
55 C:\Program Files\CouponAlert_2p\bar\Cache\00079C8C N/A
56 C:\Program Files\CouponAlert_2p\bar\Cache\000757B3.bmp N/A
57 C:\Program Files\CouponAlert_2p\bar\History\search3 N/A
58 C:\Program Files\CouponAlert_2p\bar\Settings\s_pid.dat N/A
59 C:\Program Files\CouponAlert_2p\bar\Settings\setting3.htm N/A
60 C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\GrouponBtn.html N/A
61 C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\PopupProperties200820798.html N/A
62 C:\Program Files\CouponAlert_2p N/A
63 C:\Program Files\CouponAlert_2p\bar\1.bin\CHROME.MANIFEST N/A
64 C:\Program Files\CouponAlert_2p\bar\IE9Mesg\COMMON.T8S N/A
65 C:\Program Files\CouponAlert_2p\bar\Cache\00075AC0.bmp N/A
66 C:\Program Files\CouponAlert_2p\bar\Cache\00075F92.bmp N/A
67 C:\Program Files\CouponAlert_2p\bar\Cache\000760BB.bmp N/A
68 C:\Program Files\CouponAlert_2p\bar\Cache\00075E2B.bmp N/A
69 C:\Program Files\CouponAlert_2p\bar\Settings\prevcfg2.htm N/A
70 C:\Program Files\CouponAlert_2p\bar\Settings\s_w2.dat N/A
71 C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache N/A
72 C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\CouponAlertNewDealsBtn.html N/A
73 C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\Radio.html N/A
More files

Registry Details

Coupon Alert Toolbar creates the following registry entry or registry entries:
Registry key
Software\Microsoft\Internet Explorer\Approved Extensions\{3462C343-BE19-4143-AF70-CEFB56F46FC6}
Software\Microsoft\Internet Explorer\Approved Extensions\{3A421C8F-E238-4AEB-8874-B8B5F2CC4772}
Software\Microsoft\Internet Explorer\Approved Extensions\{60E91567-EF8A-4520-BCE2-83ABA5256799}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16fe2505-f2a0-4782-b035-af0e5188c02c}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3a421c8f-e238-4aeb-8874-b8b5f2cc4772}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{60e91567-ef8a-4520-bce2-83aba5256799}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0bdf6c42-132c-45f5-92de-dc13f40c6dab}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{23b38049-323f-443d-9732-f454e5b15b72}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4623a8c4-150d-4983-8982-68c01e7d6541}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8867ac9b-4426-44a2-a693-c95850d3405c}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{95B3F577-D54A-4831-B2B4-8AACEEDA85CF}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{cf9d6d4e-5496-438e-ba24-5a580a59f5a3}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3462C343-BE19-4143-AF70-CEFB56F46FC6}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3A421C8F-E238-4AEB-8874-B8B5F2CC4772}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{60E91567-EF8A-4520-BCE2-83ABA5256799}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23B38049-323F-443D-9732-F454E5B15B72}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3462C343-BE19-4143-AF70-CEFB56F46FC6}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3A421C8F-E238-4AEB-8874-B8B5F2CC4772}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4623A8C4-150D-4983-8982-68C01E7D6541}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{60E91567-EF8A-4520-BCE2-83ABA5256799}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16fe2505-f2a0-4782-b035-af0e5188c02c}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8ac668b9-43c7-4e92-8854-2f96cb0df8e2}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3a421c8f-e238-4aeb-8874-b8b5f2cc4772}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{60e91567-ef8a-4520-bce2-83aba5256799}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0bdf6c42-132c-45f5-92de-dc13f40c6dab}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{23b38049-323f-443d-9732-f454e5b15b72}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4623a8c4-150d-4983-8982-68c01e7d6541}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8867ac9b-4426-44a2-a693-c95850d3405c}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{95B3F577-D54A-4831-B2B4-8AACEEDA85CF}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{cf9d6d4e-5496-438e-ba24-5a580a59f5a3}
File name without path
http_couponalert.dl.tb.ask.com_0.localstorage
http_couponalert.dl.tb.ask.com_0.localstorage-journal
Uninstaller
CouponAlert_2pbar Uninstall Internet Explorer
CLSID
{004EB151-885B-4A9E-A22D-CA98DD998D75}
{041278C7-DF92-486D-AE85-921BDFC75A43}
{0bdf6c42-132c-45f5-92de-dc13f40c6dab}
{0F1794F2-900B-4C81-8146-9234E5CC5BE2}
{1116A14B-F6A3-4FD9-A00E-FF8CF270EE48}
{16fe2505-f2a0-4782-b035-af0e5188c02c}
{1f0a2185-da7e-4614-91c0-dd5f4a76cb1b}
{20BCCE5A-C687-46FF-8DD2-AD8235F5F2B4}
{21D9997E-5D2A-4737-BCBA-C958C0590295}
{23b38049-323f-443d-9732-f454e5b15b72}
{2d205adf-c992-4eda-99c3-096e13f38ab4}
{3276E8A8-A233-449B-A7EB-FCEE21246018}
{3462c343-be19-4143-af70-cefb56f46fc6}
{36A7148B-639E-423C-90BB-30B6E1A40BD7}
{3a421c8f-e238-4aeb-8874-b8b5f2cc4772}
{411b1946-3277-4a7f-9f60-745266360613}
{4500a1b4-ae7b-41f0-afb6-b7139a8f950b}
{457a4cb8-0391-409d-98b4-c4ccb2849670}
{4d8eacbc-e293-4462-b91e-42ea5b54b743}
{53CA18E7-5223-4358-9FD9-97C62C66C5BD}
{58E64AEE-516A-4DFC-AC38-31C50E8AF0F1}
{60e91567-ef8a-4520-bce2-83aba5256799}
{60FC9013-4A5A-4306-9695-FCE0A6617F22}
{61DAB0AD-AD23-4E40-84AC-7C6CE64D4EB3}
{65D8E17B-312E-4E12-913B-A841A8631143}
{6BDA50D2-5597-4C68-A842-9B857FCCDA49}
{6CA3D0AB-F807-462C-BA7F-E27F07F91E32}
{6F99D2AE-5C90-43C2-A2FE-81DBE512E2FC}
{7717f4b3-397f-4ce5-9192-6effde3ac999}
{7924FD2B-877C-4395-A063-A88AB887EA6D}
{79583DE9-D0C2-44EF-AE0D-CBFA16C2A785}
{7b9f8c21-46ec-4c0b-8683-e755ef84577a}
{813AF603-8FB5-4F42-8DDA-3BBA24B473D0}
{84576f6e-0660-4b4f-8918-bc6c975044d4}
{860AF5D1-0735-409D-8E5F-E3E99356D7E9}
{8867ac9b-4426-44a2-a693-c95850d3405c}
{8997561D-CF0B-42C7-AAE6-78801B3ADC7F}
{92580E8C-88F5-4551-9D9E-8147E7EE2C32}
{95B3F577-D54A-4831-B2B4-8AACEEDA85CF}
{A0636D37-97D0-4DC4-95A6-93AABA07437F}
{A4116F8C-A634-4536-B9EF-6B9EBCC5BAE1}
{A786F51D-B3C7-4F52-91EF-E1A892C2A2AE}
{B27B89D7-65E1-4F23-89AA-02F8B7D0F525}
{C7E7FB02-C4FD-446E-8F5B-463A049935BF}
{cf9d6d4e-5496-438e-ba24-5a580a59f5a3}
{D196831D-1A59-4B05-9D47-E4F488EF0499}
{D244EAC5-A0F5-4859-A1F8-18ABC0AC3A00}
{D7CE22AF-CCB3-423F-84D5-4D77152181F3}
{DAFC4DAE-7794-4E16-9A98-F6001303DCD0}
{def07acd-bcea-4269-933a-4087d20842bb}
{E625B4C4-7359-4FE9-9022-5C4A2CEA0893}
{EAB77009-B974-48DF-8229-E70CFAA11C69}
{EBAA6283-B61F-4DDD-9659-56635433A307}
{EBAF2B4F-510A-47C7-86BA-E7D94D1162F6}
{ebbc4e43-292a-40df-88e3-3262b7521460}
{EFB0C189-5077-4340-9838-AF7B8E792A54}
{EFB4F034-3EB5-48D5-84DD-89BBCF9A182F}
{F9D45087-1CF1-452E-9649-FDFDAC578E03}
{FF2EBC1C-6579-41DB-91DD-945A1C8DB2D2}
RegistryKey
HKEY_CLASSES_ROOT\CouponAlert_2p.DynamicBarButton
HKEY_CURRENT_USER\Software\CouponAlert_2p
HKEY_LOCAL_MACHINE\SOFTWARE\CouponAlert_2p
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions "2pffxtbr@CouponAlert_2p.com"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CouponAlert_2pbar Uninstall
HKEY_CLASSES_ROOT\CouponAlert_2p.FeedManager\CurVer
HKEY_CLASSES_ROOT\CouponAlert_2p.DynamicBarButton.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CouponAlert_2p.DynamicBarButton
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@CouponAlert_2p.com/Plugin
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CouponAlert_2pService
HKEY_CLASSES_ROOT\CouponAlert_2p.FeedManager
HKEY_CLASSES_ROOT\CouponAlert_2p.DynamicBarButton\CurVer
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Search "tbedits.couponalert.com/one-toolbaredits/menusearch.jhtml?s=[]"
\HKEY_LOCAL_MACHINE\SOFTWARE\CouponAlert_2p\bar
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_COUPONALERT_2PSERVICE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "CouponAlert_2p Browser Plugin Loader"

Related Posts

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

2 Comments

  • fix slow computer:

    why is my web connection of of a laptop slow and i cant even take away the running operating system?

  • Alert And Energized:

    Very nice write-up. I absolutely appreciate this website.
    Stick with it!

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.