Threat Database Adware CouponDownloader

CouponDownloader

By GoldSparrow in Adware

Threat Scorecard

Ranking: 10,749
Threat Level: 20 % (Normal)
Infected Computers: 15,997
First Seen: May 8, 2014
Last Seen: September 16, 2023
OS(es) Affected: Windows

CouponDownloader is an adware threat that may declare to make a computer user's online browsing activity more effective and save time and money by providing best and cheapest deals, discount coupons, and offers. Once installed on a PC, CouponDownloader may create and display unwanted advertisements and messages in the form of a pop-up box, which may pertain to the PC user's requests while he is browsing the Web. CouponDownloader may unwillingly redirect computer users to various questionable websites that may provide computer users with various offers and deals with the aim to gain benefit from clicks on pop-up box ads and messages and raised Internet traffic. CouponDownloader may insert a browser extension, plug-in or add-on into all Web browsers installed on the PC like Internet Explorer, Google Chrome and Mozilla Firefox and other major Web browsers.

Aliases

2 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Comodo ApplicUnwnt
Symantec WS.Reputation.1

SpyHunter Detects & Remove CouponDownloader

File System Details

CouponDownloader may create the following file(s):
# File Name MD5 Detections
1. CouponDownloaderService64(61).exe 829fa47407ac74851fcf63b31bb01b72 3,256
2. gohymlmtrh.dll 41450f8d63d90f0ade2b886bea2f0f16 3,222
3. CouponDownloaderService.exe df7307d14158f6eddd21f7165b4b17b3 3,001
4. CouponDownloaderService64.exe c3efd5c040b8e37b7b9312897c8373dd 1,261
5. CouponDownloaderService.exe 94f45d986293afe9f83f17ec8789e919 274
6. eexvlcbkbu64.exe b0c6f89372bdf56600af0eb73f8650ed 273
7. vulsrsebjh64.exe 5277f0cce05bd752715f0394eb39bc49 227
8. axsmqwiahk.exe c612cc4e4cabbc87be6782f4fdffa7b0 120
9. rqpbhevlkc64.exe de0e0d3717a2ed1f023b779dfec581bb 10
10. rqpbhevlkc32.exe 6a9ce204031906751fe2be80abb550f7 6
11. CouponDownloaderService64.exe 00ef3d0a8ed8e0e15a5609cc801fbfc7 2

Registry Details

CouponDownloader may create the following registry entry or registry entries:
Software\AppDataLow\Software\Coupon Downloader
Software\Coupon Downloader
SOFTWARE\CouponDownloader
SOFTWARE\Wow6432Node\CouponDownloader
SYSTEM\ControlSet001\services\vulsrsebjh64
SYSTEM\ControlSet002\services\vulsrsebjh64
SYSTEM\CurrentControlSet\services\vulsrsebjh64

Directories

CouponDownloader may create the following directory or directories:

%ALLUSERSPROFILE%\CouponDownloader
%PROGRAMFILES%\4B5F3986-688D-4EE0-8390-82983E6E96A7
%PROGRAMFILES%\CouponDownloader
%PROGRAMFILES%\F2E59BED-97F5-4486-9726-66DE2DDE3B23
%PROGRAMFILES%\coupon downloader
%PROGRAMFILES(x86)%\4B5F3986-688D-4EE0-8390-82983E6E96A7
%PROGRAMFILES(x86)%\CouponDownloader
%PROGRAMFILES(x86)%\F2E59BED-97F5-4486-9726-66DE2DDE3B23
%PROGRAMFILES(x86)%\coupon downloader

Trending

Most Viewed

Loading...