Home Malware Programs Adware Adware.CouponAmazing

Adware.CouponAmazing

Posted: September 5, 2013

Threat Metric

Ranking: 11,582
Threat Level: 2/10
Infected PCs: 28,316
First Seen: September 5, 2013
Last Seen: August 22, 2023
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\D20A6820-7C28-4015-945F-09F8551FCE45\etmajyzoqm.exe File name: etmajyzoqm.exe
Size: 150.52 KB (150528 bytes)
MD5: 0ad8b70e3ec89560f477f28d9715b949
Detection count: 12,530
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\D20A6820-7C28-4015-945F-09F8551FCE45\etmajyzoqm.exe
Group: Malware file
Last Updated: November 23, 2022
C:\Program Files\3CC1B5D1-59F3-4415-8A91-3C80196471F7\kzhxnitccw.dll File name: kzhxnitccw.dll
Size: 74.75 KB (74752 bytes)
MD5: 767ee825a22a5a2c5e1974d73819ddf2
Detection count: 7,429
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files\3CC1B5D1-59F3-4415-8A91-3C80196471F7\kzhxnitccw.dll
Group: Malware file
Last Updated: January 25, 2023
%PROGRAMFILES%\65CF66DC-5268-40F3-A63A-3DA446B5FAAA\xkymsyyrfh.dll.vir File name: xkymsyyrfh.dll.vir
Size: 74.75 KB (74752 bytes)
MD5: 47013feafa99f7ab8961c0b60ceeac11
Detection count: 6,949
Mime Type: unknown/vir
Path: %PROGRAMFILES%\65CF66DC-5268-40F3-A63A-3DA446B5FAAA\xkymsyyrfh.dll.vir
Group: Malware file
Last Updated: December 24, 2021
C:\Program Files\4B5F3986-688D-4EE0-8390-82983E6E96A7\cwmsxutswc.dll File name: cwmsxutswc.dll
Size: 74.75 KB (74752 bytes)
MD5: 727a9268a9f1244310936a83ada70be9
Detection count: 307
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files\4B5F3986-688D-4EE0-8390-82983E6E96A7\cwmsxutswc.dll
Group: Malware file
Last Updated: May 13, 2021
couponamazing.exe File name: couponamazing.exe
Size: 471.35 KB (471356 bytes)
MD5: 0c8a0dd317e75dd62b2d0037e91ff8a7
Detection count: 45
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: September 5, 2013

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\couponamazingSoftware\couponamazingSoftware\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\9E45306E-64F5-4D55-8F32-B67831AC045DHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}couponamazing

Additional Information

The following directories were created:
%LOCALAPPDATA%\couponamazing%PROGRAMFILES%\40209C89-13CF-4CCA-86AF-952E659E8C2C%PROGRAMFILES%\569B28CA-75D1-4EA2-9778-830E01DBBC88%PROGRAMFILES%\E52BA74C-5F88-4F08-A1B8-3FC89D881FD1%PROGRAMFILES(x86)%\40209C89-13CF-4CCA-86AF-952E659E8C2C%PROGRAMFILES(x86)%\569B28CA-75D1-4EA2-9778-830E01DBBC88%PROGRAMFILES(x86)%\E52BA74C-5F88-4F08-A1B8-3FC89D881FD1%UserProfile%\Local Settings\Application Data\couponamazing
The following URL's were detected:
couponamazing
Loading...