Coupon Server

Coupon Server Description

Coupon Server Screenshot 1Coupon Server is an adware program designed to deliver relevant coupons while you interact with major shopping websites. Although Coupon Server’s content isn’t necessarily risky, malware research team usually does suggest removing any advertisement-generating applications from your PC to keep the stability and security of your browser optimized. Like similar shopping-focused add-ons such as SavingsShip or the MySavings Toolbar, Coupon Server usually is installed through software bundles that hide its inclusion until you’ve already gotten Coupon Server onto your computer. Avoiding untrusted download sources should be enough to keep unwanted Coupon Server installations from troubling your PC – while any competent anti-malware product should be more than adequate for deleting Coupon Server once Coupon Server is aboard your system.

When Your Server Gives You Coupons Apropos of Nothing

With hundreds of billions of dollars being spent in online shopping each year, many Web developers have a marked interest in sticking their businesses into that revenue stream, and Coupon Server is a good example of what results from such an attempt. A browser add-on that provides coupons for major retailers, Coupon Server is a legitimate service, but not always optimized for the best coupons available, and also includes poor controls for allowing you to determine when Coupon Server is displayed. By default, Coupon Server’s coupons are shown as advertisements on top of your current Web page but within the same window.

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

Coupon Server does clearly mark its coupons so that you will not confuse them with your normal site links, but Coupon Server also lacks any obvious way to control how these coupons are shown – or, most importantly, a way to turn them off easily.

In theory, Coupon Server may be installed independently, but Coupon Server usually will be installed along with other programs that happen to include Coupon Server as part of an overall bundle. Sites known to exploit software bundles for distributing toolbars and add-ons like Coupon Server should be considered untrustworthy download sources. If you must use such places to get new software, malware experts recommend scanning any downloaded files before opening them and taking the risk of getting Coupon Server or other browser add-ons that you don’t have any interest in installing.

Getting Your Shopping Coupons the Way You Want Them or not At All

Although Coupon Server only is adware and, thus, not a high-level PC threat, using anti-malware products for deleting Coupon Server still is the recommended solution, as far as malware analysts are concerned. This is especially important for any circumstance where Coupon Server has been installed against your will since Coupon Server may be one of several other programs that were placed on your computer without getting your permission for the act. Not all programs distributed through software bundles, drive-by-downloads and other dishonest methods are known for showing symptoms that you could recognize immediately, unlike the coupon alerts of Coupon Server.

At the end of it all, though, Coupon Server is not a malicious program, and dealing with Coupon Server on a temporary basis does not harm your computer. You even may want to consider keeping Coupon Server installed if you feel that its coupons are especially beneficial – even if it is a sub-optimal decision as far as your Web-browsing performance is concerned.

Coupon Server Automatic Detection Tool (Recommended)

Is your PC infected with Coupon Server? To safely & quickly detect Coupon Server we highly recommend you run the malware scanner listed below.

Visual & GUI Characteristics

Coupon Server Screenshot 2Coupon Server Screenshot 3Coupon Server Screenshot 4

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}35852_Coupon ServerCoupon ServerHKEY..\..\..\..{RegistryKeys}CrossriderApp0035852.BHO.1CrossriderApp0035852.SandboxCrossriderApp0035852.Sandbox.1SOFTWARE\Classes\CrossriderApp0035852.BHOSOFTWARE\Classes\CrossriderApp0035852.BHO.1SOFTWARE\Classes\CrossriderApp0035852.SandboxSOFTWARE\Classes\CrossriderApp0035852.Sandbox.1Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{05b8e3ed-2eed-45dd-9472-b2ca278875a6}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27d6a8df-214e-4df0-b331-47ba50d77a67}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33298A38-7854-4B07-95CA-FA7E47AD56D}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DA9F66B-8F70-4092-BA59-40F78965E2A4}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44630D90-3419-4A2F-8152-8D191FC8256}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5243a260-4ac6-42bf-9e4f-83ec6f3109db}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{57b7f976-da86-403e-9979-d4f5039ab85e}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83D5B975-BFCA-4E4B-BCE1-E9734AB010E1}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8728ba1b-e941-416b-9889-bd424849f46c}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9141F7DE-FAE7-4C6A-8539-861A1275580}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9A9B15BF-832D-4A90-BD40-1774F85A1D26}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB3781DC-BAF5-4D3B-834E-97A120D674}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d52c6886-f80e-46d4-a0dd-7b1aa6e394d4}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{deb5d4d8-5a55-4393-b50b-b6c101f93c18}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Coupon Server-updaterSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Updater35852.exeSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311581152}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311581152}SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, value: Coupon Server-repairJobSOFTWARE\Wow6432Node\Coupon ServerSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5243a260-4ac6-42bf-9e4f-83ec6f3109db}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{57b7f976-da86-403e-9979-d4f5039ab85e}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{690ab1b6-eb13-436c-9fc5-40b48d321904}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{789a79e7-1b99-4b21-84fc-3dc2c1c0d4cf}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8728ba1b-e941-416b-9889-bd424849f46c}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d52c6886-f80e-46d4-a0dd-7b1aa6e394d4}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{deb5d4d8-5a55-4393-b50b-b6c101f93c18}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311581152}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311581152}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID, value: {11111111-1111-1111-1111-110311581152}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce, value: Coupon Server-repairJobSOFTWARE\Wow6432Node\Proxy\Installations\Coupon Server
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path} {22222222-2222-2222-2222-220322582252}{11111111-1111-1111-1111-110311581152}{44444444-4444-4444-4444-440344584452}{55555555-5555-5555-5555-550355585552}{66666666-6666-6666-6666-660366586652}
Posted: October 7, 2013 | By
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Threat Metric
Threat Level: 2/10
Detection Count: 31,157

Leave a Reply

What is 14 + 13 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)