Home Malware Programs Browser Hijackers Coupondropdown.com

Coupondropdown.com

Posted: November 13, 2012

Coupondropdown.com Screenshot 1Coupondropdown.com is a website that claims to be able to help you find coupons with a little assistance from its CouponDropDown add-on. Although, to some extent, this is true, what Coupondropdown.com doesn't mention is that its browser add-on does this by inserting its advertisements and related content onto unrelated web pages. Besides hindering your ability to view websites, this also may harm your web-browsing performance or constitute a security risk (due to repetitive exposure to suspicious websites). Although any contact with Coupondropdown.com isn't necessarily guaranteed to result in attacks against your PC, SpywareRemove.com malware researchers consider removing Coupondropdown.com-related software to be a necessary security measure that should be undergone with suitable anti-malware products whenever it's applicable.

Why You Don't Want Coupondropdown.com Getting the Drop on Your Web Browser

There haven't been overt indications of Coupondropdown.com being used to distribute extremely hazardous types of malware such as banking Trojans or rootkits.

Coupondropdown.com is most notorious for its add-on, CouponDropDown, which uses questionable means of gaining traffic. Besides other changes to your browser that are typical for browser hijackers and adware (such as changing your homepage to Coupondropdown.com), symptoms of CouponDropDown also can include:

  • CouponDropDown may insert advertisement banners into unrelated websites.
  • CouponDropDown may create additional advertisements in pop-up windows.
  • CouponDropDown may insert website links for 'relevant' text content – such as linking to coupons for potatoes in the word 'vegetable.'

This HTML injection attack also has the potential to alter any web pages that you view in more malicious ways than the above, although, so far, SpywareRemove.com malware analysts haven't seen signs of Coupondropdown.com taking advantage of its full potential for causing harm.

Sending Coupondropdown.com Right Back Up Where It Came From

If you've installed Coupondropdown.com's add-on or had Coupondropdown.com installed without your permission, you should be aware that CouponDropDown doesn't have any positive features that are worth putting up with its many negative attributes and, of course, can be considered a security risk. Because Coupondropdown.com's add-on can include components for multiple browsers as well as non-browser-specific components, SpywareRemove.com malware analysts don't recommend that you use normal means of removing add-ons to delete CouponDropDown.

Thankfully, Coupondropdown.com's software hasn't shown any indications of including advanced defenses or attacks against security-related software. SpywareRemove.com malware research team suggests the use of extensive anti-malware scans to remove all traces of Coupondropdown.com-related applications from your PC – along with unwanted settings changes like modifications to your homepage.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\CouponDropDown\ File name: C:\Program Files\CouponDropDown\
C:\Program Files\CouponDropDown\Chrome\ File name: C:\Program Files\CouponDropDown\Chrome\
C:\Program Files\CouponDropDown\CouponDropDownInstaller.log File name: C:\Program Files\CouponDropDown\CouponDropDownInstaller.log
Mime Type: unknown/log
C:\Program Files\CouponDropDown\Chrome\CouponDropDown.crx File name: C:\Program Files\CouponDropDown\Chrome\CouponDropDown.crx
Mime Type: unknown/crx
C:\Program Files\CouponDropDown\CouponDropDownGui.exe File name: C:\Program Files\CouponDropDown\CouponDropDownGui.exe
File type: Executable File
Mime Type: unknown/exe
C:\Program Files\CouponDropDown\Uninstall.exe File name: C:\Program Files\CouponDropDown\Uninstall.exe
File type: Executable File
Mime Type: unknown/exe
C:\Program Files\CouponDropDown\CouponDropDown.exe File name: C:\Program Files\CouponDropDown\CouponDropDown.exe
File type: Executable File
Mime Type: unknown/exe
C:\Program Files\CouponDropDown\CouponDropDown.ini File name: C:\Program Files\CouponDropDown\CouponDropDown.ini
Mime Type: unknown/ini
C:\Program Files\CouponDropDown\CouponDropDown.ico File name: C:\Program Files\CouponDropDown\CouponDropDown.ico
Mime Type: unknown/ico
C:\Program Files\CouponDropDown\CouponDropDown.dll File name: C:\Program Files\CouponDropDown\CouponDropDown.dll
File type: Dynamic link library
Mime Type: unknown/dll

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066436652}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055435552}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044434452}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077437752}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011431152}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011431152}HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Cr_InstallerHKEY_CURRENT_USER\Software\AppDataLow\Software\CrossriderHKEY_CURRENT_USER\Software\AppDataLow\Software\CouponDropDown\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0004352.BHOHKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0004352.SandboxHKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0004352.FBApiHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\NewWindows\Allow\*.crossrider.comHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CouponDropDown

Additional Information

The following messages's were detected:
# Message
1NEVER MISS ANOTHER COUPON OR SALE!
CouponDropDown will change the way you shop online.
Buy one Get one free home accessories
Free standard shipping on all bath and beauty purchases.
40 % OFF EXTRA, includes all items, even already on sale!

Loading...