Home Malware Programs Adware Superfish Window Shopper

Superfish Window Shopper

Posted: May 17, 2011

Threat Metric

Ranking: 1,706
Threat Level: 2/10
Infected PCs: 155,375
First Seen: May 17, 2011
Last Seen: October 17, 2023
OS(es) Affected: Windows

Superfish Window Shopper is an potentially unwanted program or adware app that will display its own ads on Walmart, eBay, Best Buy, and other websites that PC users usually visit. These advertisements will be displayed as boxes that contain a variety of coupons that are available or as underlined keywords, which when clicked will show an advertisement that declares it is sent to the PC user by Superfish Window Shopper. Superfish Window Shopper is an add-on for Internet Explorer, Mozilla Firefox, and Google Chrome that is usually installed when the computer user installs other free applications. When the computer user installs these free applications, he/she will also install Superfish Window Shopper. Some of the software products that are known to be bundled with CouponDropDown include Yontoo, FBPhotoZoom, and 1ClickDownload. Once Superfish Window Shopper is installed, it will display a 'See Similar' icon next to product images on numerous shopping websites. Superfish Window Shopper may also bring deals, coupons and/or other services on related product websites. Sometimes, by clicking on a presented offer, the PC user will be rerouted to the partner's, also known as advertiser's, website via affiliate cookies.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\Superfish\Window Shopper\SuperfishIEAddon.dll File name: SuperfishIEAddon.dll
Size: 303.1 KB (303104 bytes)
MD5: e67519b6f8d918abea150bb3b7f5885d
Detection count: 3,469
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\Superfish\Window Shopper\SuperfishIEAddon.dll
Group: Malware file
Last Updated: June 27, 2023
%APPDATA%\WindowShopper\WindowShopper.dll File name: WindowShopper.dll
Size: 104.44 KB (104448 bytes)
MD5: 644d48da730ee7c118deaa70b0a40819
Detection count: 1,597
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%\WindowShopper
Group: Malware file
Last Updated: March 23, 2016
%PROGRAMFILES%\Superfish\Window Shopper\SuperfishIEAddon.dll File name: SuperfishIEAddon.dll
Size: 303.1 KB (303104 bytes)
MD5: 19b1d992de99016f287003f58b51f8b1
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Superfish\Window Shopper
Group: Malware file
Last Updated: May 27, 2013

Registry Modifications

The following newly produced Registry Values are:

CLSID{4CCDB009-EC10-4696-9991-419D39D3D1DD}{51B4D471-086A-4137-AD28-84EED05088AE}{74F475FA-6C75-43BD-AAB9-ECDA6184F600}{7C2D1DAA-5535-4742-B248-AD8CAE93D75A}{A69A551A-1AAE-4B67-8C2E-52F8B8A19504}{E1EF512D-604D-4776-AF11-410704DA1911}File name without pathhttp_www.superfish.com_0.localstoragehttp_www.superfish.com_0.localstorage-journalhttps_www.superfish.com_0.localstoragehttps_www.superfish.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\SimilarProductsSoftware\AppDataLow\Software\superfishSoftware\AppDataLow\Software\WindowShopperSOFTWARE\Classes\AppID\SuperfishIEAddon.DLLSOFTWARE\Classes\SuperfishIEAddon.BHObjectSOFTWARE\Classes\SuperfishIEAddon.BHObject.1SOFTWARE\Classes\SuperfishIEAddon.ExtentionUISOFTWARE\Classes\SuperfishIEAddon.ExtentionUI.1SOFTWARE\Classes\Wow6432Node\AppID\SuperfishIEAddon.DLLSoftware\Microsoft\Internet Explorer\Approved Extensions\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}Software\Microsoft\Internet Explorer\DOMStorage\superfish.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.superfish.comSoftware\Microsoft\Windows\CurrentVersion\Ext\Settings\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}SOFTWARE\Wow6432Node\Classes\AppID\SuperfishIEAddon.DLLSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SimilarProductsSuperFishWindowShopper

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\SimilarProducts%APPDATA%\Microsoft\Windows\Start Menu\Programs\WindowShopper%PROGRAMFILES%\SuperFish%PROGRAMFILES(x86)%\SuperFish%ProgramFiles%\SimilarProducts%ProgramFiles%\WindowShopper%ProgramFiles(x86)%\SimilarProducts%ProgramFiles(x86)%\WindowShopper
The following URL's were detected:
WindowShopper

One Comment

Loading...