Home Malware Programs Adware Coupon Matcher

Coupon Matcher

Posted: July 12, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 841
First Seen: July 12, 2013
Last Seen: December 24, 2022
OS(es) Affected: Windows

Coupon Matcher Screenshot 1Coupon Matcher is an adware program that displays pop-up advertisements, offers, coupons, and sponsored links via a pop-up box on Amazon, Walmart, Ebay, and other shopping websites that web users are visiting. These pop-up advertisements will be displayed as boxes, which encompass a variety of coupons that are available or as underlined keywords, which when clicked will show a pop-up advertisement that declares it is sent to you by Coupon Matcher. Coupon Matcher is an extension for Internet Explorer, Mozilla Firefox and Google Chrome that is usually inserted when the Internet user installs other free applications such as video recording/streaming, download managers or PDF creators that had packed into their installation Coupon Matcher. When the PC user installs these free applications, they will also install Coupon Matcher. When installed on the victimized PC, Coupon Matcher will show a See Similar button on product images, which when clicked will display pop-up ads by Coupon Matcher. Coupon Matcher may also display advertising banners on the websites that computer users are visiting, and as they surf the Internet, Coupon Matcher will show coupons and other deals available on different websites.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\Desktop\Never Delete\old pc stuff\Coupon Matcher\uninstall.exe File name: uninstall.exe
Size: 54.86 KB (54861 bytes)
MD5: c40ac2ee07fb5d7682fa0e55f7cde766
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\Never Delete\old pc stuff\Coupon Matcher\uninstall.exe
Group: Malware file
Last Updated: December 3, 2021
%PROGRAMFILES(x86)%\CouponMatcher\1.0.0.1\Engine.exe File name: Engine.exe
Size: 273.4 KB (273408 bytes)
MD5: 8322bad203f7e7fda47ce4b7da281a26
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CouponMatcher\1.0.0.1
Group: Malware file
Last Updated: November 11, 2013
CouponMatcher.exe File name: CouponMatcher.exe
Size: 997.14 KB (997144 bytes)
MD5: 0ac1e695e48e10cc5d69ec622b552894
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: August 17, 2022

Registry Modifications

The following newly produced Registry Values are:

CLSID{AC208357-2861-4A7F-B689-D088B78539ED}{B8ADAD6E-9D8C-4850-BEBF-14EAFD9B8262}{F0E7FA1D-C350-4BCF-8498-4C14E82FEA63}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{42265A2E-36F5-41D8-94A0-98A446215905}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{42265A2E-36F5-41D8-94A0-98A446215905}

Additional Information

The following directories were created:
%LocalAppData%\Google\Chrome\User Data\Default\Extensions\ookfgaefomhnmlppcghiobkjifipgbck%ProgramFiles%\CouponMatcher%ProgramFiles(x86)%\CouponMatcher
The following URL's were detected:
Coupon Matcher
Loading...