Home Malware Programs Adware WowCoupon

WowCoupon

Posted: April 22, 2014

Threat Metric

Ranking: 19,568
Threat Level: 2/10
Infected PCs: 4,602
First Seen: April 22, 2014
Last Seen: February 13, 2025
OS(es) Affected: Windows

WowCoupon is adware that, upon installation on a computer system, may add a browser extension, plug-in or add-on on a Web browser. WowCoupon may install itself into Web browsers such as Internet Explorer, Google Chrome and Mozilla Firefox. WowCoupon may create and display unwanted advertisements and messages in popular search engines such as Bing and Google. WowCoupon may install itself as a browser extension (BHO/plug-in) and run as a background process. WowCoupon may create an entry in Add/Remove Programs tool; however, removing this entry might prevent WowCoupon from running, but may not prevent ads from displaying. After installation, WowCoupon may display ads in search and numerous other websites that may use third-party advertising and substitute these ads with its own. WowCoupon may use the InstalleRex download manager from WebPicks Holdings to install itself on the PC.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\WowCoupon\6Gv1fXOYBb.x64.dll File name: 6Gv1fXOYBb.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: d9f4fd49a2a4b2bd023503bdaeeb3695
Detection count: 145
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCoupon
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WowCooupon\UYpwaDiTg1.x64.dll File name: UYpwaDiTg1.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: 9eda9049f716762a46c573f553529ec5
Detection count: 61
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCooupon
Group: Malware file
Last Updated: September 29, 2014
%ALLUSERSPROFILE%\WowCouPon\Hv7x0.x64.dll File name: Hv7x0.x64.dll
Size: 476.67 KB (476672 bytes)
MD5: 012b27fec99995dd87affdfd83d85766
Detection count: 49
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCouPon
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WWowCoupOnn\3GNm.x64.dll File name: 3GNm.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: 1d9b1c8e91768bdaa1d998a68ac5f342
Detection count: 47
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WWowCoupOnn
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WowCoupoN\0st.x64.dll File name: 0st.x64.dll
Size: 471.04 KB (471040 bytes)
MD5: 317a1d031db77cc0cc9d49aab1207399
Detection count: 40
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCoupoN
Group: Malware file
Last Updated: August 26, 2014
%SystemDrive%\ProgramData\WOwCoupon\yGr.dll File name: yGr.dll
Size: 425.98 KB (425984 bytes)
MD5: 834a60f75e4466c803b7b4aca4957539
Detection count: 40
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\ProgramData\WOwCoupon
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WowCoupon\IIOcFT5.x64.dll File name: IIOcFT5.x64.dll
Size: 476.67 KB (476672 bytes)
MD5: 0ba01da7484e3e28cff355dabc01b257
Detection count: 37
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCoupon
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WowCoupOn\P.dll File name: P.dll
Size: 421.37 KB (421376 bytes)
MD5: a7e40b4f0c8717cd87c78a4dbb80b586
Detection count: 30
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCoupOn
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WowCouPon\XGGVKs2rc.x64.dll File name: XGGVKs2rc.x64.dll
Size: 476.16 KB (476160 bytes)
MD5: 2f6e60897f8fb1f042ad14d3cf08e268
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCouPon
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WowCoupOn\Kip7tF9QEw.x64.dll File name: Kip7tF9QEw.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: 6c0ef35037066d2d17ecdb5f4d1d3c6e
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WowCoupOn
Group: Malware file
Last Updated: August 26, 2014
%ALLUSERSPROFILE%\WOwCoupone\Xc.x64.dll File name: Xc.x64.dll
Size: 473.6 KB (473600 bytes)
MD5: 6256c64e4c1cfdd4b8bf56ecd1b9ff15
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WOwCoupone
Group: Malware file
Last Updated: August 26, 2014
C:\ProgramData\wowcoupon\kA.exe File name: C:\ProgramData\wowcoupon\kA.exe
MD5: 0d1d1f19d8496c7066f2e95835df9a99
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\ProgramData\wowcoupon\kA.dll File name: C:\ProgramData\wowcoupon\kA.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
C:\ProgramData\wowcoupon\kA.x64.dll File name: C:\ProgramData\wowcoupon\kA.x64.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\WowCoupon%ALLUSERSPROFILE%\WowCoupon%PROGRAMFILES%\WowCoupon%PROGRAMFILES(x86)%\WowCoupon

Related Posts

Loading...