Home Malware Programs Potentially Unwanted Programs (PUPs) QueenCoupon

QueenCoupon

Posted: June 9, 2014

Threat Metric

Ranking: 10,961
Threat Level: 2/10
Infected PCs: 4,923
First Seen: June 9, 2014
Last Seen: October 4, 2023
OS(es) Affected: Windows


QueenCoupon is a potentially unwanted program that acts much like adware. QueenCoupon may be installed from a random freeware program downloaded over the internet. When loaded, QueenCoupon may present your web browser with several advertisements, some of which will attempt to offer deals or coupon savings through shopping sites. The QueenCoupon ads may be bothersome as they could interrupt normal surfing of the internet. Departing from the annoyances of QueenCoupon it may require the use of an antispyware tool to eliminate all components related to QueenCoupon causing the random pop-up ads or site redirects.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\QueenCOuponn\VWG1epP.dll File name: VWG1epP.dll
Size: 425.47 KB (425472 bytes)
MD5: 571857dc3d3fe6c8ebd64696ebad541c
Detection count: 81
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCOuponn
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCoupon\nwB2o_8.x64.dll File name: nwB2o_8.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: 335afac04e7ee6358d30a134c37576c9
Detection count: 74
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QUeenCoupoNe\zSUEW1M.dll File name: zSUEW1M.dll
Size: 425.47 KB (425472 bytes)
MD5: 55ee2e1e5fd1f0b78730a226a0c47ee8
Detection count: 66
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QUeenCoupoNe
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueeNCoupon\U.x64.dll File name: U.x64.dll
Size: 474.62 KB (474624 bytes)
MD5: 58fa6f95b1386b7d5187386d258c214b
Detection count: 64
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueeNCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueEnCoupon\XIq_.dll File name: XIq_.dll
Size: 424.96 KB (424960 bytes)
MD5: 06d8d4dde99c7a1aebd35c7de8fefe23
Detection count: 50
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueEnCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QQueeNCoUpoN\EOpm9rh.x64.dll File name: EOpm9rh.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: 06220fb674d692a8677711b6e27b6775
Detection count: 45
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QQueeNCoUpoN
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCoupon\1i.x64.dll File name: 1i.x64.dll
Size: 474.62 KB (474624 bytes)
MD5: af3f8b894fa6f15bf60310cb7e265bd9
Detection count: 40
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCouPon\IZqJvh79M.x64.dll File name: IZqJvh79M.x64.dll
Size: 478.72 KB (478720 bytes)
MD5: 216dd620d9abc10f45fd2ccee1d13bd1
Detection count: 36
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCouPon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueEnCoupon\pv28ykM.dll File name: pv28ykM.dll
Size: 424.96 KB (424960 bytes)
MD5: 1c51821dc9d9a8c99019834f8c0884e5
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueEnCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\Application Data\QUeenCoupon\670VR69B.dll File name: 670VR69B.dll
Size: 428.54 KB (428544 bytes)
MD5: e22ca648c340682132e7daffb12f028b
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\QUeenCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\Anwendungsdaten\QUeEnCOUpon\85ArmSK.dll File name: 85ArmSK.dll
Size: 423.42 KB (423424 bytes)
MD5: ec4675a4a05caa0deb9738b177c814fc
Detection count: 15
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Anwendungsdaten\QUeEnCOUpon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCOupon\Kt3cGU.x64.dll File name: Kt3cGU.x64.dll
Size: 476.67 KB (476672 bytes)
MD5: e7d6f2600c064805d399011376cde4df
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCOupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCouponn\vKK0Nryvl_.x64.dll File name: vKK0Nryvl_.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: 35e8eaa8b11a9b41dda2d1404ff1f546
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCouponn
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QUeeNCoUpon\_oUEOu7j.x64.dll File name: _oUEOu7j.x64.dll
Size: 476.16 KB (476160 bytes)
MD5: bcd58ceaab8b5de00eb078f1e5cd5780
Detection count: 11
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QUeeNCoUpon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCoUpOn\1DgaSp.x64.dll File name: 1DgaSp.x64.dll
Size: 474.62 KB (474624 bytes)
MD5: 064347526df688e0da0fca570da10d22
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCoUpOn
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCoupon\spXGqYZ.x64.dll File name: spXGqYZ.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: e6b73766de71c8102972cc94984d62c1
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueeNCouPon\_p1c.dll File name: _p1c.dll
Size: 424.44 KB (424448 bytes)
MD5: 1fffc8fd5828630768435881e35ecdf3
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueeNCouPon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCoupon\rNNW.x64.dll File name: rNNW.x64.dll
Size: 476.67 KB (476672 bytes)
MD5: 214fab434795769c6c2f87746730447c
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCOupon\O.dll File name: O.dll
Size: 428.54 KB (428544 bytes)
MD5: a098b4b4da553505288f62ce0ab2cc4b
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCOupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QUeenCoupon\T.dll File name: T.dll
Size: 424.44 KB (424448 bytes)
MD5: 5837ef3d4d787ee2e2a2dc19e4ed638f
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QUeenCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCoupon\2.x64.dll File name: 2.x64.dll
Size: 476.67 KB (476672 bytes)
MD5: 61735f10d88b4422125e914655c848f3
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCoupon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueenCouPon\29lyZhBiw.dll File name: 29lyZhBiw.dll
Size: 423.42 KB (423424 bytes)
MD5: 3bb7c8d0dc2fec73ae0cab74f72f36b4
Detection count: 3
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueenCouPon
Group: Malware file
Last Updated: September 1, 2014
%ALLUSERSPROFILE%\QueEnCoupon\jLFc7P8.x64.dll File name: jLFc7P8.x64.dll
Size: 474.62 KB (474624 bytes)
MD5: 58a25a368dada6ac4fb36eeac87be6e1
Detection count: 2
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\QueEnCoupon
Group: Malware file
Last Updated: September 1, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{5A5F974A-ADF2-45D0-858F-6C940379C89A}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{7D27CF86-B1C3-774E-4B37-BA21B3B757B4}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{9ED170A3-0AC2-6050-29EF-000C589197CC}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\QueenCoupon%ALLUSERSPROFILE%\QueenCoupon%PROGRAMFILES%\QueenCoupon%PROGRAMFILES(X86)%\QueenCoupon
The following URL's were detected:
QueeNCouPonQueenCoupon
Loading...