What is GrtSCouponApp?

GrtSCouponApp is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows 7 with nearly 65.22% of installations running this operating system. GrtSCouponApp's installer is typically 531.00 KB in size and installs around 19 files. The most common release is 3.1.0.1281 with 17.39% of all installations currently using this version.

GrtSCouponApp is most popular in the United States with 58.17% of installations residing in this country.

About GrtSCouponApp?

The Great Coupon software is an adware extension designed to integrate with web browsers such as Internet Explorer, Chrome, and Firefox. Upon installation, it runs as a background process and injects additional advertisements into popular search engines like Bing and Google. Despite creating an entry in Add or Remove Programs, removing this entry may not completely stop the adware from running or prevent ads from displaying. The program is also known for replacing existing ads on web pages with its own, and it utilizes the InstalleRex download manager from WebPicks Holdings to install itself on users' PCs. It is important to note that InstalleRex is associated with the distribution of potentially unwanted applications, including ad-supported extensions and web browser toolbars.

Multiple virus scanners have detected malware in GrtSCouponApp.

3Aw2.exe (MD5: a84d5bc892e7f990b60de1e812a57bb4) has been flagged by 4 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic_r.HC
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug.A
Panda Antivirus	10.0.3.5	Suspicious file
Sophos	4.97.0	MultiPlug

aQy.exe (MD5: b762b67e59693ce11d0d861fd9e9a0a9) has been flagged by 6 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic_r.HC
ByteHero BDV	1.0.0.1	Trojan.Exception.gen.101
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
Panda Antivirus	10.0.3.5	Suspicious file
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.F47V0119
Sophos	4.97.0	MultiPlug

7_.exe (MD5: 926838555c7e13f295fda017b3fa3ea9) has been flagged by 17 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.01.26.00	Adware/Win32.Agent
AVG	13.0.0.3169	Generic5.ALKI
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.40
Comodo Security	17673	ApplicUnwnt
Dr.Web		Trojan.Crossrider.37
ESET-NOD32	9338	a variant of Win32/AdWare.MultiPlug.K.gen
K7 AntiVirus	9.175.10963	Adware ( 00490ca81 )
K7GW	9.175.10963	Adware ( 00490ca81 )
Malwarebytes	1.75.0.1	PUP.Optional.Multiplug
McAfee	5.600.0.1067	Artemis!926838555C7E
McAfee-GW-Edition	2013	Artemis!926838555C7E
Panda Antivirus	10.0.3.5	Suspicious file
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V0106
VIPRE Antivirus	25802	Trojan.Win32.Generic!BT
ViRobot	2011.4.7.4223	Adware.Agent.539136
ByteHero BDV	1.0.0.1	Trojan.Exception.gen.101
Sophos	4.97.0	MultiPlug

3LkVZZwt.exe (MD5: 9c354249e2b00af7362d8eecaee9b2b2) has been flagged by 36 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.01.26	Adware/Win32.Agent
avast!	2014.9-140126	Win32:Adware-gen [Adw]
AVG	2015.0.3582	Generic5
Baidu-International	4.0.3.14126	Adware.Win32.MultiPlug.40
Bkav FE	1.3.0.4923	W32.DropperMsilB.Trojan
Comodo Security	17676	ApplicUnwnt
ESET-NOD32	8.9339	a variant of Win32/AdWare.MultiPlug.K.gen
Fortinet FortiGate	1/26/2014	Riskware/MultiPlug_K
IKARUS anti.virus	t3scan.2.2.29	Trojan.SuspectCRC
K7 AntiVirus	13.175.10963	Adware
K7GW	13.175.10963	Adware ( 00490ca81 )
Malwarebytes	v2014.01.26.01	PUP.Optional.Multiplug
McAfee	5600.7238	Artemis!9C354249E2B0
McAfee-GW-Edition	7.7238	Artemis!9C354249E2B0
Panda Antivirus	14.01.26.01	Suspicious file
Symantec	1/26/2014 rev. 1	Trojan.Gen
TrendMicro-HouseCall	7.2.26	TROJ_GEN.R0CBH05A614
VIPRE Antivirus	25818	Trojan.Win32.Generic!BT
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.582628
Agnitum Outpost	5.5.1.3	Adware.MegaSearch!M/jO5MsDxDM
Avira AntiVir	7.11.127.54	SPR/Tool.498176
Antiy-AVL	2.0.3.7	AdWare/Win32.MegaSearch
Bitdefender	7.2.5028.0	Application.Generic.582628
CAT-QuickHeal	12.00	Adware.Megasearch.at (Not a Virus)
G Data	24	Application.Generic.582628
Kaspersky	12.0.0.1221	not-a-virus:AdWare.Win32.MegaSearch.at
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MegaSearch.at.(kcloud)
MicroWorld-eScan	12.0.250.0	Application.Generic.582628
NANO AntiVirus	0.28.0.57380	Riskware.Win32.MegaSearch.cscrfp
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.422
Sophos	4.97.0	Generic PUA BA
Trend Micro	9.740.0.1012	TROJ_GEN.F0C2C00LT13
Vba32 AntiVirus	3.12.24.3	AdWare.MegaSearch
ViRobot	2011.4.7.4223	Adware.Agent.498176.A
Dr.Web		Trojan.Crossrider.37
ByteHero BDV	1.0.0.1	Trojan.Exception.gen.101

hVE.exe (MD5: 06cfeaa6556d9264ef303884935ddfe2) has been flagged by 35 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.582628
Agnitum Outpost	5.5.1.3	Adware.MegaSearch!M/jO5MsDxDM
AhnLab-V3	2014.01.26.00	Trojan/Win32.Preloader
Avira AntiVir	7.11.127.54	SPR/Tool.498176
Antiy-AVL	2.0.3.7	AdWare/Win32.MegaSearch
avast!	8.0.1489.320	Win32:Malware-gen
AVG	13.0.0.3169	Generic5.AKQI
Baidu-International	3.5.1.41473	Adware.Win32.MegaSearch.40
Bitdefender	7.2.5028.0	Application.Generic.582628
Bkav FE	1.3.0.4923	W32.WonintLTD.Trojan
CAT-QuickHeal	12.00	Adware.Megasearch.at (Not a Virus)
Comodo Security	17672	ApplicUnwnt
ESET-NOD32	9337	a variant of Win32/AdWare.MultiPlug.K.gen
Fortinet FortiGate	5.1.147.0	Adware/Megasearch
G Data	24	Application.Generic.582628
IKARUS anti.virus	T3.1.5.6.0	Win32.AdWare
K7 AntiVirus	9.175.10963	Adware ( 00490ca81 )
K7GW	9.175.10963	Adware ( 00490ca81 )
Kaspersky	12.0.0.1221	not-a-virus:AdWare.Win32.MegaSearch.at
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MegaSearch.at.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug.A
McAfee	5.600.0.1067	PUP-FFY!06CFEAA6556D
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan	12.0.250.0	Application.Generic.582628
NANO AntiVirus	0.28.0.57380	Riskware.Win32.MegaSearch.cscrfp
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.422
Sophos	4.97.0	Generic PUA BA
Trend Micro	9.740.0.1012	TROJ_GEN.F0C2C00LT13
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2C00LT13
Vba32 AntiVirus	3.12.24.3	AdWare.MegaSearch
VIPRE Antivirus	25786	Trojan.Win32.Generic!BT
ViRobot	2011.4.7.4223	Adware.Agent.498176.A
Dr.Web		Trojan.Crossrider.37
ByteHero BDV	1.0.0.1	Trojan.Exception.gen.101

Software Details

URL:

https://optonthing.info

Support:

–

Installation path:

C:\ProgramData\grtscouponapp

Uninstaller:

"C:\ProgramData\GrtSCouponApp\3LkVZZwt.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""

Size:

531.00 KB

Language:

English

GrtSCouponApp Executable Details

Primary executable:

3LkVZZwt.exe

Name:

GrtSCouponApp

Path:

C:\ProgramData\grtscouponapp\3LkVZZwt.exe

MD5:

9c354249e2b00af7362d8eecaee9b2b2

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

aQy.exe

Malware

b762b67e59693ce11d0d861fd9e9a0a9

EXE

TaBNSKFasL.exe

9c354249e2b00af7362d8eecaee9b2b2

EXE

SbpAUwgl.exe

926838555c7e13f295fda017b3fa3ea9

EXE

PczR2Hi8.exe

926838555c7e13f295fda017b3fa3ea9

EXE

a3.exe

9c354249e2b00af7362d8eecaee9b2b2

EXE

7_.exe

Malware

926838555c7e13f295fda017b3fa3ea9

EXE

5uLyYX.exe

9c354249e2b00af7362d8eecaee9b2b2

EXE

3LkVZZwt.exe

Malware

9c354249e2b00af7362d8eecaee9b2b2

EXE

hVE.exe

Malware

06cfeaa6556d9264ef303884935ddfe2

File Type	Filename	MD5
EXE	aQy.exe Malware	b762b67e59693ce11d0d861fd9e9a0a9
EXE	TaBNSKFasL.exe	9c354249e2b00af7362d8eecaee9b2b2
EXE	SbpAUwgl.exe	926838555c7e13f295fda017b3fa3ea9
EXE	PczR2Hi8.exe	926838555c7e13f295fda017b3fa3ea9
EXE	a3.exe	9c354249e2b00af7362d8eecaee9b2b2
EXE	7_.exe Malware	926838555c7e13f295fda017b3fa3ea9
EXE	5uLyYX.exe	9c354249e2b00af7362d8eecaee9b2b2
EXE	3LkVZZwt.exe Malware	9c354249e2b00af7362d8eecaee9b2b2
EXE	hVE.exe Malware	06cfeaa6556d9264ef303884935ddfe2

GrtSCouponApp

What is GrtSCouponApp?

About GrtSCouponApp?

Multiple virus scanners have detected malware in GrtSCouponApp.

Software Details

GrtSCouponApp Executable Details