Coupon Buddy appeared but doesn't appear in addons or extensions.
This is what gets me. I don't have any toolbars installed- NONE. I was at the NCH website downloading a beta version of Debut and noticed in the R upper corner of the screen the number three in what appeared to be the corner of a rolled back paper page. I got curious because it looked out of place on the webpage so I clicked the numeral 3 and walla a small window appeared with the announcement that they had located three coupons I might like to look at.
There are no toolbars installed and none in the addons list. There is nothing remotely involved wit toolbars in the extension list.
Where oh where did this thing come from and where do I have go to get rid of it. This is worse than crapware this obviously has burrowed into the system settings some how. At this point I've only seen this thing once and I view it more as a nuisance than threat. But, if someone has figured out a way to bypass the areas we normally watch to prevent this nefarious kind of marketing we have a budding problem in the malware department. I hope someone has had a similar experience and can offer some guidance.
Chosen solution
Ok, a great thanks to everyone who's assisted this old geezer and an old geezer I am.
I was just on Newegg again and no more Couponbuddy. Hooray!!
Once again everybody- thank you all for your time and patience. I will close this out as problem solved.
Read this answer in context 👍 1All Replies (15)
1. Please provide a screenshot of that.
https://support.mozilla.org/en-US/kb/how-do-i-create-screenshot-my-problem
It is best to use a compressed image type like PNG or JPG to save the screenshot and make sure that you do not exceed a maximum file size of 1 MB.
Then use the Browse .... button below the Post a Reply text box to upload the screenshot.
2. Please provide a listing of your installed extensions from Help > Troubleshooting Information - use Copy all to clipboard and post that list into the reply box. You should delete everything in that listing except for the Extensions list.
Thanks, that was quick. Like I said I've only seen the thing one time and that was about 90 minutes ago. I will retrace my steps and see if I can get it to appear again. I'll be back.
I just retraced my steps and it's just like when I take my car to the mechanic- nothing happened. If I can get it to reappear I'll post my results. Thanks.
I'll give you a few things you can try to make sure this doesn't happen in the future. I suggest just running through the list as you have time and trying them all.
Run all Windows Updates, install all needed service packs, etc.
Download and Install MalwareBytes Anti-Malware, run a full Scan. http://www.malwarebytes.org/. This helps check that there are no viruses on your computer causing issues. You can uninstall this program after you clean off any infections.
Finally, if this doesn't help, Reset Firefox. Refresh Firefox - reset add-ons and settings
Coupon Buddy is an application built to add to your toolbar so you're definitely looking in the right spot. It's not something that's downloaded or installed - it's an app that exists on the toolbar. Check to see if you have any hidden toolbars. Also look at your control panel to see if there is any toolbars there to uninstalls. Hope that helps.
Application Basics
Name
Firefox
Version
15.0
User Agent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0
Profile Folder
Show Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Crash Reports
about:crashes
Memory Use
about:memory
Extensions
Name
Version
Enabled
ID
DoNotTrackPlus
2.2.1.829
true
donottrackplus@abine.com
FlashResizer
1.4
true
{C6F77964-B0B5-4953-A144-93051184EC0C}
FreemakeTB
10.10.27.6
true
{adca5064-9e30-43fe-9856-58b07a3149fe}
Google Similar Images
0.4
true
nishan.naseer.googimagesearch@gmail.com
GoogleSharing
0.22
true
googlesharing@extension.thoughtcrime.org
LastPass
2.0.0
true
support@lastpass.com
New Tab Homepage View
1.1
true
clearz@gmail.com
Updated Ad Blocker for Firefox 11+
0.7.7
true
{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}
AVG Security Toolbar
12.2.0.5
false
avg@toolbar
Freemake Video Downloader Plugin
1.0.0
false
fmdownloader@gmail.com
WCaptureX
5.0
false
wcapturex@deskperience.com
Important Modified Preferences
Name
Value
accessibility.typeaheadfind.flashBar
0
browser.cache.disk.capacity
1048576
browser.cache.disk.smart_size.first_run
false
browser.cache.disk.smart_size_cached_value
1048576
browser.places.smartBookmarksVersion
4
browser.search.openintab
false
browser.startup.homepage
http://www.google.com/
browser.startup.homepage_override.buildID
20120824154833
browser.startup.homepage_override.mstone
15.0
browser.tabs.closeButtons
1
browser.tabs.loadInBackground
false
browser.tabs.opentabfor.middleclick
true
browser.tabs.tabMinWidth
100
extensions.lastAppVersion
15.0
keyword.URL
http://search.conduit.com/ResultsExt.aspx?ctid=CT3214568&SearchSource=2&q=
network.cookie.prefsMigrated
true
network.prefetch-next
true
places.database.lastMaintenance
1346166022
places.history.expiration.transient_current_max_pages
52772
privacy.donottrackheader.enabled
true
privacy.sanitize.migrateFx3Prefs
true
security.warn_viewing_mixed
false
Graphics
Adapter Description
Intel(R) G41 Express Chipset
Vendor ID
0x8086
Device ID
0x2e32
Adapter RAM
Unknown
Adapter Drivers
igdumd64 igd10umd64 igdumdx32 igd10umd32
Driver Version
8.15.10.2555
Driver Date
10-13-2011
Direct2D Enabled
true
DirectWrite Enabled
true (6.1.7600.16385)
ClearType Parameters
ClearType parameters not found
WebGL Renderer
Google Inc. -- ANGLE (Intel(R) G41 Express Chipset) -- OpenGL ES 2.0 (ANGLE 1.0.0.1041)
GPU Accelerated Windows
1/1 Direct3D 10
AzureBackend
direct2d
JavaScript
Incremental GC
0
Library Versions
Expected minimum version
Version in use
NSPR
4.9.1
4.9.1
NSS
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
NSS Util
3.13.6.0
3.13.6.0
NSS SSL
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
NSS S/MIME
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
Here you go. Thanks for all the replies I've gotten. Now that everyone can see what's going on under the hood maybe I can rid myself of this critter.
Hey, thanks for posting your list of extensions. You definitely have some toolbars installed though not visible. Looks like its FreemakeTB that has the CB app. Remove that extension and restart.
Application Basics
Name
Firefox
Version
15.0
User Agent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0
Profile Folder
Show Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Crash Reports
about:crashes
Memory Use
about:memory
Extensions
Name
Version
Enabled
ID
DAP Link Checker
1.0.0.9
true
daplinkchecker@speedbit.com
DoNotTrackPlus
2.2.1.829
true
donottrackplus@abine.com
FlashResizer
1.4
true
{C6F77964-B0B5-4953-A144-93051184EC0C}
Google Similar Images
0.4
true
nishan.naseer.googimagesearch@gmail.com
GoogleSharing
0.22
true
googlesharing@extension.thoughtcrime.org
LastPass
2.0.0
true
support@lastpass.com
New Tab Homepage View
1.1
true
clearz@gmail.com
Updated Ad Blocker for Firefox 11+
0.7.7
true
{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}
AVG Security Toolbar
12.2.0.5
false
avg@toolbar
Download Accelerator Plus (DAP) extension
10.0.2.6
false
{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}
Freemake Video Downloader Plugin
1.0.0
false
fmdownloader@gmail.com
WCaptureX
5.0
false
wcapturex@deskperience.com
Important Modified Preferences
Name
Value
accessibility.typeaheadfind.flashBar
0
browser.cache.disk.capacity
1048576
browser.cache.disk.smart_size.first_run
false
browser.cache.disk.smart_size_cached_value
1048576
browser.places.smartBookmarksVersion
4
browser.search.openintab
false
browser.startup.homepage
http://www.google.com/
browser.startup.homepage_override.buildID
20120824154833
browser.startup.homepage_override.mstone
15.0
browser.tabs.closeButtons
1
browser.tabs.loadInBackground
false
browser.tabs.opentabfor.middleclick
true
browser.tabs.tabMinWidth
100
extensions.lastAppVersion
15.0
keyword.URL
http://search.conduit.com/ResultsExt.aspx?ctid=CT3214568&SearchSource=2&q=
network.cookie.prefsMigrated
true
network.prefetch-next
true
places.database.lastMaintenance
1346166022
places.history.expiration.transient_current_max_pages
52772
privacy.donottrackheader.enabled
true
privacy.sanitize.migrateFx3Prefs
true
security.warn_viewing_mixed
false
Graphics
Adapter Description
Intel(R) G41 Express Chipset
Vendor ID
0x8086
Device ID
0x2e32
Adapter RAM
Unknown
Adapter Drivers
igdumd64 igd10umd64 igdumdx32 igd10umd32
Driver Version
8.15.10.2555
Driver Date
10-13-2011
Direct2D Enabled
true
DirectWrite Enabled
true (6.1.7600.16385)
ClearType Parameters
ClearType parameters not found
WebGL Renderer
Google Inc. -- ANGLE (Intel(R) G41 Express Chipset) -- OpenGL ES 2.0 (ANGLE 1.0.0.1041)
GPU Accelerated Windows
1/1 Direct3D 10
AzureBackend
direct2d
JavaScript
Incremental GC
0
Library Versions
Expected minimum version
Version in use
NSPR
4.9.1
4.9.1
NSS
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
NSS Util
3.13.6.0
3.13.6.0
NSS SSL
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
NSS S/MIME
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
Ok, when you spotted that TB I felt like a major idiot but so it goes. I have posted the revised info after removal of the Freemake TB. I see and avg toolbar as well. How can I get rid of that thing? I have a paid version of Comodo Security Suite running and I don't need and AV conflicts happening. Thanks to everyone especially pcapriolo with the good eye.
Ha, it happens. Just glad to help. You should be able to remove the AVG toolbar the same way by removing the extension like you did for Freemake TB.
There is no option that I see to remove. There's only enable or disable. Tard that I am, I've included a screen capture. If it won't hurt anything I won't worry. Anyone who have ever had two antivirus programs duking it out will understand why I'm paranoid.
Hmmmm, well you could disable or maybe uninstalling AVG from your control panel would do the trick.
Disabling AVG in Firefox is the same as uninstalling.
Chosen Solution
Ok, a great thanks to everyone who's assisted this old geezer and an old geezer I am.
I was just on Newegg again and no more Couponbuddy. Hooray!!
Once again everybody- thank you all for your time and patience. I will close this out as problem solved.