What is Underground Coupon?
Underground Coupon is an adware-type program that you should avoid getting on your computer, but if you do, then you ought to remove it. This application is configured to load various promoted websites, and we believe that some of them are unreliable and may get your computer infected with malware. Also, some websites may try to extract personal information from you or claim that you have won a prize and redirect to scam sites. Please continue reading to find out more about this adware.
Where does Underground Coupon come from?
Our researchers have made breakthrough and have finally identified the company that is responsible for creating Underground Coupon. This is a result of extensive research because previous attempts did not bring any results. The company that created this adware is called MDMExclusives/MyDailyMoment which is a trademark of Flatiron Media, LLC. Note that this company has also created multiple clone applications called Travel Giga, CrunchTravel, QuantumCoupons, and many others. All of these applications work in a similar fashion and are distributed using the same methods as well, so let us elaborate on that.
While testing this application your malware researchers have found that, like its clones, Underground Coupon is promoted via other adware that features its link in coupons and browser hijackers that include the same link in their search results. The links redirect to this program’s main distribution website Undergroundcoupon.com. This site hosts Underground Coupon’s installer. This installer is known as InstallCore, and it features third-party software, such as MyPcBackUp which is a potentially unwanted program, but it might also install Opera, a legitimate web browser. When you run an InstallCore-based installer, make sure to notice that the decline button for additional software is featured on the left. However, most people to not notice this and accidentally install unwanted unasked-for software.
How does Underground Coupon work?
After you install this application it opens Internet Explorer and loads http://interest6.valuedinformation.com/numbers/?t=5&c1=UAOCD::. This website features links to various sites, but they do not work, and all of them redirect to http://justautosinsurancespherescorners.com/?p1=300538&z1=UAOCD::. Underground Coupon creates a desktop shortcut, and when you launch it, you will get all kinds of random windows. For example, this program might display a fake “Certified Winner Claim Form” which states that you have won one of four prizes that include a 65inch Samsung Smart TV, Dell Inspiration laptop, Apple iPad Mini or $50.00 SkyAuction Savings Certificate. Furthermore, Underground Coupon’s GUI window might also load a page offering you to enter your email for a chance to win a hoverboard. Note that when you launch this program, it will open its GUI window and Internet Explorer and load different promotions. Internet Explorer, for example, might load http://savings-galleria.com/?agent_ID=202081&campaign_ID=6389, a page that displays various advertisements. This is just a glimpse of what you might get when you install this adware. Our researchers say that this program’s promotions are of unreliable nature and might get your computer infected with malware using dishonest marketing tactics.
When one of our researchers tested this application he was presented with an offer to install a new version of Flash Player. He agreed and advanced trough the installation setup, but here is the catch. One window stated that “By clicking "Accept" you agree to the Testing-24.com Terms of Service and Privacy Policy and to install the selected Testing-24.com components”. Then it showed another window to install Eshield Safe Search and then another to install Money Viking, and then One System Care. The Flash Player update installation setup crashed, but it appeared to be legitimate. The programs that were installed in addition to the Flash Player were not. These programs fall into the category of potentially unwanted or adware. So if you believe the promotions coming from Underground Coupon, then chances are that you will get your computer infected with adware or install potentially unwanted programs. Therefore, the content that this program offers is of no use and can only cause trouble, and we suggest that you delete this application as soon as the opportunity arises.
How to remove Underground Coupon?
In conclusion, this adware is more than likely to subject you to shady promotions, and the chances are that your PC will become infected with malware if you fall for the old update Flash Player trick. In most cases you should be able to uninstall this program via Control Panel, but if this program will continue to show ads, then use our manual removal instructions. In closing, do not forget to check your computer for PUPs and adware and other unwanted software and consult our website on how to remove them, or just get our recommended anti-malware tool to get rid of the malicious and questionable software all at once.
Uninstall using Control Panel
Windows 10 and 8.1/8
- Simultaneously press Windows+I keys.
- Select Control Panel.
- Find the adware and Uninstall it.
Windows 7 and Vista
- Open Start menu and click Control Panel.
- Select Uninstall a program.
- Find the application and click Uninstall.
Windows XP
- Open Start menu.
- Click Control Panel.
- Select Add or Remove Programs.
- Find the malicious program.
- Click Uninstall.
Delete files manually
- Press Windows+E keys.
- In the Explorer window’s address box enter C:\Program Files\UndergroundCoupon
- Delete all files in that folder.
- Close the window.
- Then press Windows+R keys.
- Enter regedit in the box and click OK.
- Go to SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E70D50C5-553B-424F-B18A-5DDCEB53CE9A}_is1
- Delete {E70D50C5-553B-424F-B18A-5DDCEB53CE9A}_is1
tested removal of Underground Coupon*
0 Comments.