Home Malware Programs Adware PriceFountain

PriceFountain

Posted: September 11, 2014

Threat Metric

Ranking: 4,284
Threat Level: 2/10
Infected PCs: 143,611
First Seen: September 11, 2014
Last Seen: October 16, 2023
OS(es) Affected: Windows


PriceFountain ads are part of an adware program that may display random ads attempting to provide discounts or savings for shopping on the internet. Use of the PriceFountain ads may cause redirects to other sites that may prove to be unwanted in some situations in their repeated offers of coupon deals or other methods of supposedly saving money when shopping on popular commerce sites on the internet. The PriceFountain ads in their pop-up or banner forms may be stopped by detecting all components or plugins related to PriceFountain and then removing them. This process may be done automatically through an antispyware application.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\{78019492-D27F-7F28-1D60-52154068BDD8}\PriceFountainUpdateVerUpdate.exe File name: PriceFountainUpdateVerUpdate.exe
Size: 382.97 KB (382976 bytes)
MD5: 67b7fdf9ba592fc554cd249c7fffdb24
Detection count: 611
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{78019492-D27F-7F28-1D60-52154068BDD8}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{09727222-B65B-ABAB-BFA3-0F3643C0DA0C}\PriceFountainUpdateVerUpdate.exe File name: PriceFountainUpdateVerUpdate.exe
Size: 530.43 KB (530432 bytes)
MD5: 4a0afb5c3eb9cf25380a4bcfdcfaf03b
Detection count: 473
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{09727222-B65B-ABAB-BFA3-0F3643C0DA0C}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{6E9DF73D-950B-9B76-1BA2-5EB813E30DFC}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 289.28 KB (289280 bytes)
MD5: c68645dfabc603c7e6be472773a8958a
Detection count: 384
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{6E9DF73D-950B-9B76-1BA2-5EB813E30DFC}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{2CF53BB3-A265-AE9D-F2D2-00DB2EC11CE7}\PriceFountainUpdateVerUpdate.exe File name: PriceFountainUpdateVerUpdate.exe
Size: 292.86 KB (292864 bytes)
MD5: 376f5e8c8d58022a8ba7faf9ccc696cb
Detection count: 248
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{2CF53BB3-A265-AE9D-F2D2-00DB2EC11CE7}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{04DBD1BD-D4B8-0809-08C9-35C0B3F34A51}\pricefountainupdateverupdate.exe File name: pricefountainupdateverupdate.exe
Size: 399.36 KB (399360 bytes)
MD5: c34b92d1c7776a9143ca4f21cdd78ac0
Detection count: 220
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{04DBD1BD-D4B8-0809-08C9-35C0B3F34A51}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{5D2362B7-D4B7-C15F-9B31-194098BE0DF2}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 560.64 KB (560640 bytes)
MD5: ed690e04534d450955a51ab0e1707bb4
Detection count: 183
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{5D2362B7-D4B7-C15F-9B31-194098BE0DF2}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{33E0D06B-A476-C04A-22DA-538EC3F95D4D}\PriceFountainUpdateVerUpdate.exe File name: PriceFountainUpdateVerUpdate.exe
Size: 356.86 KB (356864 bytes)
MD5: 9fc9ffde4ad5fbeac6c666d910e2588e
Detection count: 162
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{33E0D06B-A476-C04A-22DA-538EC3F95D4D}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{5B261E9F-D119-BDB0-81BC-0281DA260C72}\pricefountainupdateverupdate.exe File name: pricefountainupdateverupdate.exe
Size: 340.99 KB (340992 bytes)
MD5: 701af2a68cd925ab2e5f4fe8d5e00dad
Detection count: 150
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{5B261E9F-D119-BDB0-81BC-0281DA260C72}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{1E4FFE50-9A6A-F2A5-3875-412BF6D5B7AC}\pricefountainupdatever.exe File name: pricefountainupdatever.exe
Size: 545.28 KB (545280 bytes)
MD5: 37c7dc7cf80cafec375c906383b5ee23
Detection count: 122
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{1E4FFE50-9A6A-F2A5-3875-412BF6D5B7AC}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{46CEBF67-6FF6-C049-00E8-039BF935F076}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 345.6 KB (345600 bytes)
MD5: 8aec1c7b5c700290e763e90904d3f180
Detection count: 115
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{46CEBF67-6FF6-C049-00E8-039BF935F076}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{08415CFE-725B-F6AC-A6ED-1F0F7DA45274}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 306.68 KB (306688 bytes)
MD5: 85f256d5adce36085acef1f424a5b550
Detection count: 89
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{08415CFE-725B-F6AC-A6ED-1F0F7DA45274}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{7852F551-B559-D799-658F-7D1BB97F1261}\pricefountainupdatever.exe File name: pricefountainupdatever.exe
Size: 497.66 KB (497664 bytes)
MD5: e70f8480b5c74f642e6431371732bd39
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{7852F551-B559-D799-658F-7D1BB97F1261}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{0916C1FF-EAEA-2AB5-B1E7-011CE51580B6}\pricefountainupdatever.exe File name: pricefountainupdatever.exe
Size: 368.64 KB (368640 bytes)
MD5: 49340baa07bd9072b910eb1c81f58767
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{0916C1FF-EAEA-2AB5-B1E7-011CE51580B6}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{40FB7DDA-714C-5749-4558-7A095FF8FEE5}\pricefountainupdateverupdate.exe File name: pricefountainupdateverupdate.exe
Size: 318.46 KB (318464 bytes)
MD5: cc9c0ac6f4ea33eacd1eddd6fa39162a
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{40FB7DDA-714C-5749-4558-7A095FF8FEE5}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{1F6FE71F-0AAF-AEF7-F658-640A8834A037}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 398.84 KB (398848 bytes)
MD5: 119323e3809d9ccf465aef7f3354fbc8
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{1F6FE71F-0AAF-AEF7-F658-640A8834A037}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{78AE411C-53CC-4BB1-E072-24609D531B3C}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 358.4 KB (358400 bytes)
MD5: 1b1cb0c34914b14017737f8c846645fe
Detection count: 77
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{78AE411C-53CC-4BB1-E072-24609D531B3C}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{1FCE07BB-E9BC-46A3-DC26-5CF2E51086CE}\pricefountainupdatever.exe File name: pricefountainupdatever.exe
Size: 335.87 KB (335872 bytes)
MD5: f1809f1cb90bd0ded28a00ff17e62c2e
Detection count: 68
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{1FCE07BB-E9BC-46A3-DC26-5CF2E51086CE}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{60B027D9-95A2-4D4D-C0C7-4D3B80BF7521}\pricefountainupdatever.exe File name: pricefountainupdatever.exe
Size: 410.11 KB (410112 bytes)
MD5: 1ddaab39007dfb2e4ba75b94987c772d
Detection count: 66
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{60B027D9-95A2-4D4D-C0C7-4D3B80BF7521}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{530CF9C1-6439-8616-3CDC-0E4C7828756E}\pricefountainupdatever.exe File name: pricefountainupdatever.exe
Size: 303.61 KB (303616 bytes)
MD5: 8dd6a70d29c317e937d9e42849474894
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{530CF9C1-6439-8616-3CDC-0E4C7828756E}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{290E0288-C5B8-55A9-1340-5BBAACC653E7}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 325.12 KB (325120 bytes)
MD5: bccb6594b778291d1a3576fb7f98ab24
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{290E0288-C5B8-55A9-1340-5BBAACC653E7}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{6BAEF24D-A395-1D78-59E6-13391CBB319C}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 326.65 KB (326656 bytes)
MD5: eef938e1f298b17db62015c093c4810d
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{6BAEF24D-A395-1D78-59E6-13391CBB319C}
Group: Malware file
Last Updated: July 13, 2017
%APPDATA%\{47444609-3184-1D25-2FCF-0A8F4AB75A26}\PriceFountainUpdateVer.exe File name: PriceFountainUpdateVer.exe
Size: 348.16 KB (348160 bytes)
MD5: 04efacc81cd1d7378219a5784ea82994
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\{47444609-3184-1D25-2FCF-0A8F4AB75A26}
Group: Malware file
Last Updated: July 13, 2017

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{b608cc98-54de-4775-96c9-097de398500c}File name without pathPriceFountainUpdateVer.exePriceFountainUpdateVerUpdate.exeRegexp file mask%WINDIR%\System32\Tasks\Price Fountain%WINDIR%\System32\Tasks\PriceFountainUpdateVer%WINDIR%\System32\Tasks\PriceFountainV2%WINDIR%\Tasks\Price Fountain.job%WINDIR%\Tasks\PriceFountainUpdateVer.jobHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{b608cc98-54de-4775-96c9-097de398500c}Software\Microsoft\Internet Explorer\DOMStorage\pricefountain.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.pricefountain.comSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Price Fountain.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Price Fountain.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PriceFountainUpdateVer.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PriceFountainUpdateVer.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PFExeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Price FountainSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PriceFountainUpdateVerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PriceFountainV2Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B608CC98-54DE-4775-96C9-097DE398500C}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B608CC98-54DE-4775-96C9-097DE398500C}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PriceFountainSoftware\Microsoft\Windows\CurrentVersion\Run\pricefountainw.exeSoftware\PrcFountainSoftware\PriceFountainSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\PriceFountainHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}BawdierNeuterPrice FountainPriceFountainPriceFountainUpdateVer

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\PriceFountain%APPDATA%\PriceFountain%APPDATA%\PriceFountainUpdateVer%LOCALAPPDATA%\BawdierNeuter%LOCALAPPDATA%\DieresisPeach%LOCALAPPDATA%\KrishnaRheums%LOCALAPPDATA%\PriceFountain%LOCALAPPDATA%\TorchierIncidental%PROGRAMFILES%\PriceFountain%PROGRAMFILES(x86)%\PriceFountain%Temp%\PriceFountain%UserProfile%\Local Settings\Application Data\PriceFountain
The following URL's were detected:
PriceFountainpricefountain.com
Loading...