Threat Database Adware Discount Buddy

Discount Buddy

By LoneStar in Adware

Threat Scorecard

Ranking: 9,816
Threat Level: 20 % (Normal)
Infected Computers: 1,592
First Seen: March 27, 2013
Last Seen: September 10, 2023
OS(es) Affected: Windows

ScreenshotDiscount Buddy is a potentially unwanted program generated by 215 apps for Internet Explorer, Mozilla Firefox and Google Chrome that is commonly added when computer users install other free software products. Deal Boat will display ads, coupons and sponsored links via a pop-up box on Amazon, Walmart, Ebay and other shopping websites that are visited by web users. These pop-up ads will be displayed as boxes, which incorporate a variety of coupons that are available or as underlined keywords, which when clicked will show a pop-up adt that claims it comesto the victim from Deal Boat. When PC users install free software products, they will also install Deal Boat. When installed, Deal Boat will display a box, which carries associated keyword suggestions, ads and sponsored links, in the right top part of the targeted Internet browser, whenever the web user will visit Facebook, Expedia, Best Buy or any other similar websites.

SpyHunter Detects & Remove Discount Buddy

Registry Details

Discount Buddy may create the following registry entry or registry entries:
CLSID
{11111111-1111-1111-1111-110211671166}
{22222222-2222-2222-2222-220222672266}
{44444444-4444-4444-4444-440244674466}
{55555555-5555-5555-5555-550255675566}
{66666666-6666-6666-6666-660266676666}
Software\AppDataLow\Software\Discount Buddy
SOFTWARE\Classes\CrossriderApp0026766.BHO
SOFTWARE\Classes\CrossriderApp0026766.BHO.1
SOFTWARE\Classes\CrossriderApp0026766.Sandbox
SOFTWARE\Classes\CrossriderApp0026766.Sandbox.1
Software\InstalledBrowserExtensions\215 Apps\26766
Software\InstalledBrowserExtensions\Innovative Apps\26766
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211671166}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31111111-1111-1111-1111-110211671166}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Updater26766.exe
SOFTWARE\Proxy\Installations\Discount Buddy
SOFTWARE\Wow6432Node\Discount Buddy
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211671166}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211671166}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Discount Buddy-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Tracing\Discount Buddy_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Discount Buddy_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\Updater26766_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Updater26766_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211671166}

Directories

Discount Buddy may create the following directory or directories:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Discount Buddy
%LOCALAPPDATA%\Discount Buddy
%LOCALAPPDATA%\Updater26766
%PROGRAMFILES%\Discount Buddy
%PROGRAMFILES(x86)%\Discount Buddy
%UserProfile%\Local Settings\Application Data\Discount Buddy
%UserProfile%\Local Settings\Application Data\Updater26766

URLs

Discount Buddy may call the following URLs:

Discount Buddy

Related Posts

Trending

Most Viewed

Loading...