couponprinter.exe

A website for downloading coupons wants to download a program called couponprinter.exe to my wifes computer...

I would like to know if it is spyware before I install it and find out it is bad...

 

Couple of things you can do, but I Googled it and came up empty, so if I were you, I'd tell the wife it's not safe.

If you insist on DLing it anyways, DL it to your desktop, and do not open it.

Then go to one of the following websites, and submit it for evaluation. Most of them are quite busy usually, so be patient.
Joti File Scanner <<<--Very likely you'll get a 'page not found' due to its load.
Norman Sandbox<<<--this one requires an email address, but it is 100% safe and you won't get any spam.
Virus Scan by Kaspersky<<<---also requires email

And you can also try your own resident av, if the option to 'Scan With...' is in your drop down menu when right clicking the file.

Also, what website was she getting the file in question from? this could also give us a good idea as to whether or not the site is trustworthy.

Let us know.

TeMerc

 

see this page:

http://www.exisle.net/mb/lofiversion/index.php/t25697.html

 

I can't imagnie there being any question of whether or not to install the software to get the coupons after reading that. Granted tho, that was a year ago.

Did you get a chance to try what I suggested?

 

Not yet but here is the site: www.shopping-bargains.com

Here is what they say: (no mention of couponprinter.exe)

Important Online Coupon Shopping Details
Tips for Getting the Most Out of Shopping-Bargains.com

Shopping-Bargains.com provides free coupon codes, discount codes, printable local store and grocery coupons, online discount coupons, online shopping discounts and special savings links. What Shopping-Bargains.com usually refers to as coupon codes are sometimes called promotional codes, promotion codes, promo codes, store codes, discount codes, key codes, voucher codes, source codes or shopping codes by online stores.

Customer Service - Help Using Coupon Codes:

Don't know how to use online coupon codes? Get instructions for using the online coupon codes and promotional links at Shopping-Bargains.com. Please let us know if you find any technical errors or incorrect coupon codes on Shopping-Bargains.com.

Coupon Links Open in New Browser Window:

Please note that most of our coupon code and promotion links open in a new browser window so shoppers can refer back to the online coupon code during checkout when it is time to enter it in the shopping cart. For this reason some shoppers with popup blockers installed may need to enable popups for Shopping-Bargains.com; however, Shopping-Bargains.com does not employ banner ad popups or popunders.

Coupon Code Exclusions:

Shopping-Bargains.com features coupon codes and online promotional links for 1000+ online stores. Please note that the online coupon codes, promotional offers and online shopping sales and specials listed on Shopping-Bargains.com are subject to the appropriate store's terms and condistions and may be altered or cancelled without notice. Certain items and/or brands are often excluded from online coupon discounts and promotions. The free shipping coupon code discounts listed at Shopping-Bargains.com refer to continental U.S. shipping unless otherwise noted. Please read the coupon code or offer details for each online coupon code or promotion and follow all coupon code exclusions or special terms. A final check of the store's online shopping cart details before the final order submission is a essential to verify that the coupon code or promotion was applied correctly.

Shopping-Bargains.com Usage Tips:

Many Shopping-Bargains.com users find it helpful to visit Shopping-Bargains.com every day since new coupon codes and online promotions are added daily. To quickly find the newest Shopping-Bargains.com online coupon codes, use the red coupon code button bar at the top of this page to display the newest coupon codes. Listed under "New Coupons," these online coupon codes and discount promotions are less than three days old. The coupon codes that will expire within three days are listed under "Expires Soon." Browse the other sortable coupon code buttons for additional online shopping bargains. A special Shopping-Bargains.com feature is the "Exclusive Bargains" coupon button for coupon codes and promotions that are only offered by Shopping-Bargains.com or authorized affiliates. All these online coupon codes and discount promotions are sortable by popularity, date promotion added, coupon expiration date, or alphabetically by store.

Help Us Save You More Money Online:

Shopping-Bargains.com provides a free, private, no registration shopping experience for bargain hunters, coupon clippers and online shoppers. If you like our coupon codes, free shipping bargains, printable grocery store coupons and other promotional discounts then we encourage you to come back regularly and click our links so we get credit. The more online shoppers that take advantage of these online coupon codes and discounts then the more likely Shopping-Bargains.com will be able to offer new and better online coupon codes and discounts in the future.

Wait....it all starts here: http://print.coupons.com/gmsa/Login.asp?pid=11793&ZID=pm71&NID=10

 

Well, I guess they can be ok, I see that SiteADvisor gives them both a 'green' status, which is good.

I would still not run the exe until you run it thru a scanner.

SiteAdvisor Analysis: Shopping Bargains.com

SiteAdvisor analysis: Coupons.com

Good luck!!

 

First link was dead. Here is the bottom one;

Complete scanning result of "couponprinter.exe ", received in VirusTotal at 06.27.2006, 00:17:35 (CET).

Antivirus Version Update Result
AntiVir 6.35.0.16 06.26.2006 no virus found
Authentium 4.93.8 06.26.2006 no virus found
Avast 4.7.844.0 06.26.2006 no virus found
AVG 386 06.26.2006 no virus found
BitDefender 7.2 06.27.2006 no virus found
CAT-QuickHeal 8.00 06.26.2006 no virus found
ClamAV devel-20060426 06.26.2006 no virus found
DrWeb 4.33 06.26.2006 Adware.Coupons
eTrust-InoculateIT 23.72.49 06.25.2006 no virus found
eTrust-Vet 12.6.2275 06.26.2006 no virus found
Ewido 3.5 06.26.2006 no virus found
Fortinet 2.77.0.0 06.26.2006 no virus found
F-Prot 3.16f 06.26.2006 no virus found
Ikarus 0.2.65.0 06.26.2006 no virus found
Kaspersky 4.0.2.24 06.26.2006 no virus found
McAfee 4793 06.26.2006 no virus found
Microsoft 1.1481 06.25.2006 no virus found
NOD32v2 1.1626 06.26.2006 no virus found
Norman 5.90.21 06.26.2006 no virus found
Panda 9.0.0.4 06.26.2006 no virus found
Sophos 4.07.0 06.26.2006 no virus found
Symantec 8.0 06.26.2006 no virus found
TheHacker 5.9.8.165 06.26.2006 no virus found
UNA 1.83 06.26.2006 no virus found
VBA32 3.11.0 06.26.2006 no virus found
VirusBuster 4.3.7:9 06.25.2006 no virus found


Aditional Information
File size: 1138376 bytes
MD5: fec69f58851037bdfa25465f85d10023
SHA1: aba46fb0b159199afb91cb172ad82897a8f1d5b9

VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware

 

I would grab a 'second opinion' from one of the other sites. Just because only one of the resident avs flagged it, does not mean it's totally safe.

The Joti site is just busy, it's not a dead link, happens all the time. The level of submissions is astonishing to that site.

Of course this is entirely up to you, but in these days of everyone bundling things, I'd rather be safe than sorry.

 

Another site that may be less busy is Virus Total
http://www.virustotal.com/xhtml/index_en.html

Jotti may be less busy at another time of day. But here is another URL which just worked for me
http://virusscan.jotti.org/

Personally, I am an avid coupon user, but I would tend to avoid CouponPrinter.

 

Virustotal was my first scan. I got the same results with http://virusscan.jotti.org/

 

http://virusscan.jotti.dhs.org/ Could it be that IE7 is stopping me from opening this site?

 

No, that site is just that busy, typically it takes several tries, and most of us in security seem to have better luck in the late nites\early mornings.

If you're lucky, first shot it may tell you how many others are waiting in que, and will also retry the service every 30 seconds.

 

mojo13--
I believe http://virusscan.jotti.dhs.org/ and http://virusscan.jotti.org/ take you to the same scanner, so maybe you do not have to worry about not being able to open the http://virusscan.jotti.dhs.org/ site?
I just got through to http://virusscan.jotti.org/ without any delay again.
However, once you have submitted your file to be scanned there may be some delay before the scan starts. Jotti will usually tell you how long you will have to wait.
Or is it the delay in starting the scan that you are talking about rather than that you cannot reach the site?

 

Welshjim, I believe I've already been to that site and got results. The only one who showed anything was DrWeb. I think it is the same site too!

I sent the file to Norman's Sandbox yesterday but never got a response. I sent it with another e-mail address today so I will see what happens.

 

mojo13--FWIW--I have not been able to get through to http://virusscan.jotti.dhs.org/ after a couple of days of trying.
I think jotti (http://virusscan.jotti.org/) is different than Virus Total. In my limited experience, it is more likely to pick up trojans. Also, it tells you if scanning has taken longer than expected at a specific site, suggesting there could be a problem, even if nothing was detected.

 

I tried both places and got the same results...I clicked the link and recognized the site

 

Norman Scanner Engine 5.90. 7
Sandbox 05.90, dated 21/05-2006

Your message ID (for later reference): 20060627-929

Hello,

Thanks for taking the time to submit your samples to the Norman Sandbox Information Center. Customer delight is our top priority at Norman. With that in mind we have developed Sandbox Solutions for organizations that are committed to speedy analysis and debugging.

Norman Sandbox Solutions give your organization the opportunity to analyze files immediately in your own environment.

To find out how to bring the power of Norman Sandbox into your test environments follow the links below.

Norman Sandbox Solutions
http://www.norman.com/Product/Sandbox-products/

Norman Sandbox Analyzer
http://www.norman.com/Product/Sandbox-products/Analyzer/

Norman Sandbox Analyzer Pro
http://www.norman.com/Product/Sandbox-products/Analyzer-pro/

Norman SandBox Reporter
http://www.norman.com/Product/Sandbox-products/Reporter/

couponprinter.exe : Not detected by sandbox (Signature: NO_VIRUS)

(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.


Sent by me.johnson@comcast.net to sandbox.

Received 27.June 2006 at 23.43 - processed 28.June 2006 at 00.45.