Home Malware Programs Adware KeyCoupons

KeyCoupons

Posted: May 19, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 740
First Seen: May 19, 2014
Last Seen: May 2, 2022
OS(es) Affected: Windows


KeyCoupons is an adware application that changes your Web browser's settings to load extra advertisements. Although advertisement-promoting functions are not necessarily threatening, the invasive techniques used by KeyCoupons may endanger your Web-browsing experience or harm your browser's performance, and malware researchers have found no advantages to letting KeyCoupons remain installed. With all downsides and no benefits worth noting, getting rid of KeyCoupons should be an easy decision for anyone, but doing so without appropriate adware-removing software may result in continuing dysfunctions for your browser of choice.

The E-Coupons that Cost Your Browser Too Much

KeyCoupons is considered a Potentially Unwanted Program (alternately referred to as a PUP or a PUA) due to its general lack of beneficial attributes and suspicious business practices, particularly regarding its installation. Because KeyCoupons and similar adware programs may be bundled with the installers of unrelated software, most PC users install KeyCoupons by mischance when attempting to download a file manager or other, equally popular software. KeyCoupons is not sufficiently threatening to be considered a threat, but malware researchers have seen numerous negative, albeit not illegal issues with KeyCoupons:

  • KeyCoupons may inject advertising links into arbitrary Web page content, such as specific text 'keywords.'
  • KeyCoupons also may load additional windows or tabs for advertising content at random intervals, or when your browser loads a particular Web page.
  • KeyCoupons is unlikely to filter its content to protect your safety and always there is the risk of including fraudulent Flash updates and other well-known misleading tactics that distribute threatening software. Phishing attacks that may collect your information through fraudulent pretenses (such as a survey or contest) also are a secondary, but still considerable security risk.
  • Because KeyCoupons's advertisements may be loaded through sites not designed to host them, KeyCoupons advertisements may block your access to legitimate links, navigation interfaces or other website content.
  • You can't disable these advertisement functions without removing KeyCoupons, and failing to do so may allow KeyCoupons to be a continual source of performance problems, such as slow Web page loading times, which are caused by KeyCoupons's additional advertisement content.

The Key to Cutting KeyCoupons out of Your Browser Permanently

Since KeyCoupons is a separate application that may remain on your PC as an independent entity from the browser that KeyCoupons is so happy to modify, browsers that show any clear indications of the symptoms of a KeyCoupons installation shouldn't be uninstalled. Instead of attacking the symptom, malware analysts would suggest deleting KeyCoupons with applications that include adware-removal functions in their scope of features. Because of its similarity to other adware, such as Deal Slider, KeyCoupons may be mistakenly identified as another adware program, but this mistake shouldn't harm the uninstall process. However, you may wish to keep your Web browser closed and use Safe Mode while removing KeyCoupons.

Even though the liberties that KeyCoupons and other adware programs take with your browser are not nearly as extensive as the attacks of real threats, allowing the wholesale display of advertisements from an untrustworthy source always is a significant risk to your Web-surfing security. In providing advice for blocking the distribution of threatening software, malware experts also note that limiting potential points of contact, such as KeyCoupons advertising, is one of several steps needed to keep your PC safe.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 9aaf60c0a4bee23c82e74ef47b2f6a77
Detection count: 93
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: f2ecf2f1c9c06abed18139341c38e850
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\KeyCoupons\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 258.08 KB (258088 bytes)
MD5: e46e26630e73fee6707ec675e544e301
Detection count: 80
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 7eee281f610875017e1affe3bd46e10c
Detection count: 75
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 100dff5e492d202b57a20a6a0dd43765
Detection count: 71
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\KeyCoupons\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 258.08 KB (258088 bytes)
MD5: 6c698d2519e58502ad6c07a9ec6946b0
Detection count: 68
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\KeyCoupons
Group: Malware file
Last Updated: June 4, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 44bb922110fd97caff343d6fa5ecfae9
Detection count: 56
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\KeyCoupons\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: 15a1b77a5f912b4b4019d201d0c67a02
Detection count: 50
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 43183b7b85771f53ad10e8168b995f4d
Detection count: 49
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: b525127f1357752c21c33f6e5e5702cf
Detection count: 33
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 5cf64c1c305f32213fa1284ae0f22735
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: bb0d6b260aebe8b0f2b2ae2a84cb781b
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: 04f6dd881b5e781ca104a5500fff503d
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: bedb75535c81842d192dc629e5c16563
Detection count: 24
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: a0808c433b8b1b34b0ff3ff2874d4f83
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 057aff2fe1241abe7e697f68457300b6
Detection count: 20
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345648 bytes)
MD5: d42a8ddcc470a8666e27c342e41be5fc
Detection count: 20
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 33589aff17bbdc95b4f897c2f80a30e8
Detection count: 19
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 26, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: bc306c327e80876c5191ae1e66dc2e90
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\KeyCoupons\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: 4339fce3ef009e44f8fbf665819d1125
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 2d45b5b54779a13b6c443567e7c72d25
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345648 bytes)
MD5: a8e7705e7341287ae0402a764e777ba3
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 282.67 KB (282672 bytes)
MD5: c833855e7a2c6919d01b79c18e4b47b6
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 345.64 KB (345648 bytes)
MD5: 3f129a466228b247843eccd0537989b4
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons
Group: Malware file
Last Updated: June 9, 2014
C:\Users\<username>\appdata\Local\KeyCoupons\SoftwareDetector.exe File name: C:\Users\<username>\appdata\Local\KeyCoupons\SoftwareDetector.exe
MD5: d277bec3154e086ecfaba5f32c3f1ef0
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\KeyCoupons\gpedit.exe File name: C:\Users\<username>\appdata\Local\KeyCoupons\gpedit.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\KeyCoupons\SoftwareDetector.exe File name: C:\Users\<username>\appdata\Local\KeyCoupons\SoftwareDetector.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\KeyCoupons\sqlite3.exe File name: C:\Users\<username>\appdata\Local\KeyCoupons\sqlite3.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Users\<username>\appdata\Local\KeyCoupons\uninstall.exe File name: C:\Users\<username>\appdata\Local\KeyCoupons\uninstall.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\38966SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6E713650-8DDF-499E-95B6-DD10C65CC8C5}SOFTWARE\Wow6432Node\38966

Additional Information

The following directories were created:
%APPDATA%\{6E713650-8DDF-499E-95B6-DD10C65CC8C5}%LOCALAPPDATA%\KeyCoupons%PROGRAMFILES%\KeyCoupons%PROGRAMFILES(x86)%\KeyCoupons%USERPROFILE%\AppData\LocalLow\{6E713650-8DDF-499E-95B6-DD10C65CC8C5}
Loading...