Home Malware Programs Adware Superfish Window Shopper

Superfish Window Shopper

Posted: May 17, 2011

Threat Metric

Ranking: 4,060
Threat Level: 2/10
Infected PCs: 157,764
First Seen: May 17, 2011
Last Seen: March 10, 2025
OS(es) Affected: Windows

Superfish Window Shopper is an potentially unwanted program or adware app that will display its own ads on Walmart, eBay, Best Buy, and other websites that PC users usually visit. These advertisements will be displayed as boxes that contain a variety of coupons that are available or as underlined keywords, which when clicked will show an advertisement that declares it is sent to the PC user by Superfish Window Shopper. Superfish Window Shopper is an add-on for Internet Explorer, Mozilla Firefox, and Google Chrome that is usually installed when the computer user installs other free applications. When the computer user installs these free applications, he/she will also install Superfish Window Shopper. Some of the software products that are known to be bundled with CouponDropDown include Yontoo, FBPhotoZoom, and 1ClickDownload. Once Superfish Window Shopper is installed, it will display a 'See Similar' icon next to product images on numerous shopping websites. Superfish Window Shopper may also bring deals, coupons and/or other services on related product websites. Sometimes, by clicking on a presented offer, the PC user will be rerouted to the partner's, also known as advertiser's, website via affiliate cookies.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Superfish Window Shopper may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

* See Free Trial offer below. EULA and Privacy/Cookie Policy.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Geek Squad Data Backup\Documents and Settings\Stephen\Application Data\WindowShopper\WindowShopper.dll File name: WindowShopper.dll
Size: 104.44 KB (104448 bytes)
MD5: 644d48da730ee7c118deaa70b0a40819
Detection count: 1,600
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Geek Squad Data Backup\Documents and Settings\Stephen\Application Data\WindowShopper\WindowShopper.dll
Group: Malware file
Last Updated: February 25, 2024
%PROGRAMFILES%\Superfish\Window Shopper\SuperfishIEAddon.dll File name: SuperfishIEAddon.dll
Size: 303.1 KB (303104 bytes)
MD5: 19b1d992de99016f287003f58b51f8b1
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Superfish\Window Shopper
Group: Malware file
Last Updated: May 27, 2013

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{4CCDB009-EC10-4696-9991-419D39D3D1DD}{51B4D471-086A-4137-AD28-84EED05088AE}{74F475FA-6C75-43BD-AAB9-ECDA6184F600}{7C2D1DAA-5535-4742-B248-AD8CAE93D75A}{A69A551A-1AAE-4B67-8C2E-52F8B8A19504}{E1EF512D-604D-4776-AF11-410704DA1911}File name without pathhttp_www.superfish.com_0.localstoragehttp_www.superfish.com_0.localstorage-journalhttps_www.superfish.com_0.localstoragehttps_www.superfish.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\SimilarProductsSoftware\AppDataLow\Software\superfishSoftware\AppDataLow\Software\WindowShopperSOFTWARE\Classes\AppID\SuperfishIEAddon.DLLSOFTWARE\Classes\SuperfishIEAddon.BHObjectSOFTWARE\Classes\SuperfishIEAddon.BHObject.1SOFTWARE\Classes\SuperfishIEAddon.ExtentionUISOFTWARE\Classes\SuperfishIEAddon.ExtentionUI.1SOFTWARE\Classes\Wow6432Node\AppID\SuperfishIEAddon.DLLSoftware\Microsoft\Internet Explorer\Approved Extensions\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}Software\Microsoft\Internet Explorer\DOMStorage\superfish.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.superfish.comSoftware\Microsoft\Windows\CurrentVersion\Ext\Settings\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}SOFTWARE\Wow6432Node\Classes\AppID\SuperfishIEAddon.DLLSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SimilarProductsSuperFishWindowShopper

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\SimilarProducts%APPDATA%\Microsoft\Windows\Start Menu\Programs\WindowShopper%PROGRAMFILES%\SuperFish%PROGRAMFILES(x86)%\SuperFish%ProgramFiles%\SimilarProducts%ProgramFiles%\WindowShopper%ProgramFiles(x86)%\SimilarProducts%ProgramFiles(x86)%\WindowShopper
The following URL's were detected:
WindowShopper

One Comment

Loading...
Spywareremove.com uses cookies to provide you with a better browsing experience and analyze how users navigate and utilize the Site. By using this Site or clicking on "OK", you consent to the use of cookies. Learn more.