Home Malware Programs Adware NextCoup

NextCoup

Posted: March 7, 2014

Threat Metric

Ranking: 10,953
Threat Level: 2/10
Infected PCs: 20,430
First Seen: March 10, 2014
Last Seen: October 11, 2023
OS(es) Affected: Windows

NextCoup is adware which may be downloaded on the computer system when the PC user downloads free applications from questionable download websites. NextCoup may cause numerous PC problems when it is downloaded and installed on the computer system. The PC user may agree to download NextCoup when the PC user is downloading other free software, or the PC user may download NextCoup mistakenly by being not enough attentive to the installation process of the free software. When the PC user downloads a free program from the Web and does not follow the download agreement, the PC user may not know what other potentially unwanted applications may come packed together with the particular free program the PC user is downloading. Once downloaded and installed, NextCoup may show annoying pop-up advertisements and messages on the PC. NextCoup may hijack the Web browser and lead to unwanted redirects to suspicious websites.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\NExtCoup\ek.dll File name: ek.dll
Size: 790.52 KB (790522 bytes)
MD5: f259225ce1d4a6426da55d6f8006a138
Detection count: 86
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\NExtCoup
Group: Malware file
Last Updated: July 15, 2014
%PROGRAMFILES%\NextCouup\mQDXKyIBms.dll File name: mQDXKyIBms.dll
Size: 618.87 KB (618870 bytes)
MD5: ae5d157111b2765f27b3cf8e5330fde6
Detection count: 64
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\NextCouup
Group: Malware file
Last Updated: July 15, 2014
%PROGRAMFILES%\NextCouup\vL9aj73a.dll File name: vL9aj73a.dll
Size: 552.94 KB (552947 bytes)
MD5: 4831cd6281dad5758c1d19f52a2ff9a8
Detection count: 46
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\NextCouup
Group: Malware file
Last Updated: July 15, 2014
%PROGRAMFILES%\NextCoup\2.dll File name: 2.dll
Size: 535.41 KB (535410 bytes)
MD5: 1304138dbd07bd43cec354b95849cb01
Detection count: 2
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\NextCoup
Group: Malware file
Last Updated: July 15, 2014

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\OpenWithProgids\NexTCouPSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{156A0BE8-AB57-A221-0FBF-C45DB259EDCD}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\NextCoup%ALLUSERSPROFILE%\NextCoup%PROGRAMFILES%\NextCoiup%PROGRAMFILES%\NextCoup%PROGRAMFILES(x86)%\NextCoiup%PROGRAMFILES(x86)%\NextCoup
The following URL's were detected:
NextCOupNextCouP
Loading...