KeyCoupons

KeyCoupons Description


KeyCoupons is an adware application that changes your Web browser's settings to load extra advertisements. Although advertisement-promoting functions are not necessarily threatening, the invasive techniques used by KeyCoupons may endanger your Web-browsing experience or harm your browser's performance, and malware researchers have found no advantages to letting KeyCoupons remain installed. With all downsides and no benefits worth noting, getting rid of KeyCoupons should be an easy decision for anyone, but doing so without appropriate adware-removing software may result in continuing dysfunctions for your browser of choice.

The E-Coupons that Cost Your Browser Too Much

KeyCoupons is considered a Potentially Unwanted Program (alternately referred to as a PUP or a PUA) due to its general lack of beneficial attributes and suspicious business practices, particularly regarding its installation. Because KeyCoupons and similar adware programs may be bundled with the installers of unrelated software, most PC users install KeyCoupons by mischance when attempting to download a file manager or other, equally popular software. KeyCoupons is not sufficiently threatening to be considered a threat, but malware researchers have seen numerous negative, albeit not illegal issues with KeyCoupons:

  • KeyCoupons may inject advertising links into arbitrary Web page content, such as specific text 'keywords.'
  • KeyCoupons also may load additional windows or tabs for advertising content at random intervals, or when your browser loads a particular Web page.
  • KeyCoupons is unlikely to filter its content to protect your safety and always there is the risk of including fraudulent Flash updates and other well-known misleading tactics that distribute threatening software. Phishing attacks that may collect your information through fraudulent pretenses (such as a survey or contest) also are a secondary, but still considerable security risk.
  • Because KeyCoupons's advertisements may be loaded through sites not designed to host them, KeyCoupons advertisements may block your access to legitimate links, navigation interfaces or other website content.
  • You can't disable these advertisement functions without removing KeyCoupons, and failing to do so may allow KeyCoupons to be a continual source of performance problems, such as slow Web page loading times, which are caused by KeyCoupons's additional advertisement content.

The Key to Cutting KeyCoupons out of Your Browser Permanently

Since KeyCoupons is a separate application that may remain on your PC as an independent entity from the browser that KeyCoupons is so happy to modify, browsers that show any clear indications of the symptoms of a KeyCoupons installation shouldn't be uninstalled. Instead of attacking the symptom, malware analysts would suggest deleting KeyCoupons with applications that include adware-removal functions in their scope of features. Because of its similarity to other adware, such as Deal Slider, KeyCoupons may be mistakenly identified as another adware program, but this mistake shouldn't harm the uninstall process. However, you may wish to keep your Web browser closed and use Safe Mode while removing KeyCoupons.

Even though the liberties that KeyCoupons and other adware programs take with your browser are not nearly as extensive as the attacks of real threats, allowing the wholesale display of advertisements from an untrustworthy source always is a significant risk to your Web-surfing security. In providing advice for blocking the distribution of threatening software, malware experts also note that limiting potential points of contact, such as KeyCoupons advertising, is one of several steps needed to keep your PC safe.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to KeyCoupons may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\KeyCoupons\FrameworkEngine.exe File name: FrameworkEngine.exe
Size: 247.84 KB (247848 bytes)
MD5: b5eecb41c31e73b1ea2c35a199f27ecb
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\KeyCoupons\
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\KeyCoupons\FrameworkBHO.dll File name: FrameworkBHO.dll
Size: 258.08 KB (258088 bytes)
MD5: d5da10192ffd43b4af0799bb60f3618a
Detection count: 37
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\KeyCoupons\
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES(x86)%\KeyCoupons\FrameworkBHO64.dll File name: FrameworkBHO64.dll
Size: 325.16 KB (325160 bytes)
MD5: 057aff2fe1241abe7e697f68457300b6
Detection count: 20
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\KeyCoupons\
Group: Malware file
Last Updated: May 20, 2014
%LOCALAPPDATA%\KeyCoupons\uninstall.exe File name: uninstall.exe
Size: 146.52 KB (146521 bytes)
MD5: c8d189bd33f62fb2e6029fa4c8ecfe93
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\KeyCoupons\
Group: Malware file
Last Updated: May 20, 2014
C:\users\user\appdata\Local\KeyCoupons\SoftwareDetector.exe File name: C:\users\user\appdata\Local\KeyCoupons\SoftwareDetector.exe
MD5: d277bec3154e086ecfaba5f32c3f1ef0
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\users\user\appdata\Local\KeyCoupons\gpedit.exe File name: C:\users\user\appdata\Local\KeyCoupons\gpedit.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\users\user\appdata\Local\KeyCoupons\SoftwareDetector.exe File name: C:\users\user\appdata\Local\KeyCoupons\SoftwareDetector.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\users\user\appdata\Local\KeyCoupons\sqlite3.exe File name: C:\users\user\appdata\Local\KeyCoupons\sqlite3.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\users\user\appdata\Local\KeyCoupons\uninstall.exe File name: C:\users\user\appdata\Local\KeyCoupons\uninstall.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

More files

Registry Modifications


The following newly produced Registry Values are:

Registry keySOFTWARE\38966SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6E713650-8DDF-499E-95B6-DD10C65CC8C5}SOFTWARE\Wow6432Node\38966Directory%APPDATA%\{6E713650-8DDF-499E-95B6-DD10C65CC8C5}%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\efgfhdkjjknfbnmnfcglhegapdgegjcg%LOCALAPPDATA%\KeyCoupons%PROGRAMFILES%\KeyCoupons%PROGRAMFILES(x86)%\KeyCoupons%USERPROFILE%\AppData\LocalLow\{6E713650-8DDF-499E-95B6-DD10C65CC8C5}%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\efgfhdkjjknfbnmnfcglhegapdgegjcg%USERPROFILE%\Local Settings\Application Data\KeyCoupons
Posted: May 19, 2014
Threat Metric
Threat Level: 2/10
Infected PCs 677

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.