{"id":1302,"date":"2014-08-08T20:06:44","date_gmt":"2014-08-08T20:06:44","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=1302"},"modified":"2018-05-29T12:02:48","modified_gmt":"2018-05-29T12:02:48","slug":"remove-cashnback-ncupons","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/remove-cashnback-ncupons\/","title":{"rendered":"CashNBack and NCupons &#8211; Removal Instructions"},"content":{"rendered":"<p>Found another bundled piece of software\u00a0this morning. It&#8217;s called <strong>Cash&#8217;n&#8217;Back<\/strong> or <strong>NCupons\u00a0<\/strong>and has been around for a while. If you have this on your machine, you&#8217;ll see the\u00a0<a href=\"https:\/\/www.virustotal.com\/en\/analisis\/\/file\/136ecde589c8d6172aa7659542e6df2b5bc24b7e7ae6f220d2040f5aa07ae717\/analysis\/\">CashNBack.exe<\/a>\u00a0process running in the background.<\/p>\n<p><strong>Cash&#8217;n&#8217;Back<\/strong> is bundled with other software downloads. Here&#8217;s how it is disclosed in the installer where I found it:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-installer.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1304\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-installer.png\" alt=\"cashnback installer\" width=\"417\" height=\"198\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-installer.png 417w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-installer-300x142.png 300w\" sizes=\"(max-width: 417px) 100vw, 417px\" \/><\/a><\/p>\n<p>CashNBack&#8217;s web site it ncupons.com if you&#8217;d like to review the Terms and Conditions and the Privacy Policy.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-ncupons.png\"><img loading=\"lazy\" class=\"alignnone wp-image-1305 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-ncupons.png\" alt=\"cashnback's web site is ncupons.com\" width=\"538\" height=\"181\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-ncupons.png 538w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-ncupons-300x100.png 300w\" sizes=\"(max-width: 538px) 100vw, 538px\" \/><\/a><\/p>\n<p>If you&#8217;d like to remove <strong>NCupons<\/strong>\/<strong>CashNBack<\/strong> you can do so from the Add\/Remove programs dialog, or by selecting the Cash&#8217;n Back files in <a title=\"About FreeFixer\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a>.<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-uninstall.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1306\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-uninstall.png\" alt=\"cashnback uninstall\" width=\"653\" height=\"218\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-uninstall.png 653w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-uninstall-300x100.png 300w\" sizes=\"(max-width: 653px) 100vw, 653px\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1303\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback.png\" alt=\"cashnback\" width=\"790\" height=\"426\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback.png 790w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/cashnback-300x161.png 300w\" sizes=\"(max-width: 790px) 100vw, 790px\" \/><\/a><\/p>\n<p>I uploaded the CashNBack.exe file\u00a0to VirusTotal and MalwareBytes detected it as PUP.Optional.CashNBack.A.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Found another bundled piece of software\u00a0this morning. It&#8217;s called Cash&#8217;n&#8217;Back or NCupons\u00a0and has been around for a while. If you have this on your machine, you&#8217;ll see the\u00a0CashNBack.exe\u00a0process running in the background. Cash&#8217;n&#8217;Back is bundled with other software downloads. Here&#8217;s how it is disclosed in the installer where I found it: CashNBack&#8217;s web site it &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/remove-cashnback-ncupons\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">CashNBack and NCupons &#8211; Removal Instructions<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1302"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=1302"}],"version-history":[{"count":4,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1302\/revisions"}],"predecessor-version":[{"id":1310,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1302\/revisions\/1310"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=1302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=1302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=1302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}