Home Malware Programs Adware WBSvCouponApp

WBSvCouponApp

Posted: February 10, 2014

Threat Metric

Ranking: 19,541
Threat Level: 2/10
Infected PCs: 942
First Seen: February 10, 2014
Last Seen: February 12, 2025
OS(es) Affected: Windows


WBSvCouponApp is adware that may declare to make a computer user's Web browsing activity more efficient and save time and money by providing best and cheapest offers, deals, discounts and coupons. Once installed on a PC, WBSvCouponApp may show unwanted pop-up advertisements and messages or banners, which may be related to the PC user's search requests while he is browsing the Web. WBSvCouponApp may unwillingly redirect computer users to various unidentified websites that may provide computer users with various deals and offers with the aim to make a profit and boost website traffic. WBSvCouponApp may insert a browser extension, plug-in or add-on into all the Web browsers installed on the PC incorporating Internet Explorer, Google Chrome and Mozilla Firefox.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



GVVBfk.exe File name: GVVBfk.exe
Size: 1.61 MB (1612696 bytes)
MD5: 61392fccef8cc8886414e282bf5152f5
Detection count: 49
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 2, 2014

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\WbSvCouponApp.WbSvCouponAppSOFTWARE\Classes\WbSvCouponApp.WbSvCouponApp.3.18SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{2EF6B162-50A1-84DE-BC50-7CE8A06C65F0}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{44E4311D-BA06-FD43-505E-17DC53F4C22F}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\WbSvCouponApp%ALLUSERSPROFILE%\WbSvCouponApp%PROGRAMFILES%\WbSvCouponApp%PROGRAMFILES(x86)%\WbSvCouponApp
The following URL's were detected:
WbSvCouponApp
Loading...