NextCoup ads: what it is and how to remove it

NextCoup is described as a browser add-on that allows gathering all types of beneficial deals from the Internet. However, note that this is only a marketing strategy used to promote the app and it truly has deserved the reputation of a potentially unwanted program as it causes continuous pop-ups, banner ads, sponsored links, and similar distractions during people's browsing.

Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

Clicked a notification from lesvirus.fr and installed something? A free scan checks programs and browsers in one pass.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove NextCoup ads yourself 2 steps, about 6 minutes, no software needed.

Google ChromeMicrosoft EdgeMozilla FirefoxSafari (Mac)

Screenshot of NextCoup: pup
NextCoup as our 2020 report showed it.

NextCoup ads: summary

NameNextCoup
Extension namesNextCoupp, NeXXXTCoup, NextCOiuuP
TypeAdware app/potentially unwanted program
PromotionThis suspicious app promotes itself as a helpful browser add-on that is capable of delivering the most relevant deals and helping users to maximize their budgets
AppearanceThe adware can show up on both Windows and Mac computer systems. Also, it is likely to infect any type of web browsers such as Google Chrome, Mozilla Firefox, Internet Explorer, Microsoft Edge, and Safari
ActivitiesOnce the PUP appears on the computer system, it can initiate intrusive advertising activities, redirect the user to affiliate domains, collect non-personal information that is related to the user's browsing experience
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 11 more facts
Detection namesNo Microsoft detection name is known
DistributionNot recorded in the old report
DamageNot recorded in the old report
SymptomsNotification spam from a website
Evidence5 write-ups by security sites; details still limited
Domainslesvirus.fr
Ads shown asDesktop notifications
BrowsersChrome, Edge and Firefox
Installed on the PCNothing; a browser notification permission only
First seen18 January 2020
Facts checked6 October 2026

What the NextCoup ads ads look like

notification spam from a website

The latest trend in online shopping has finally come. The Nextcoup browser add on gives its users the power to choose the best deal by gathering all online deals and coupons from internet shopping sites. You can save and maximize your budgets using this browser add on, and shop in less time.

Is NextCoup ads dangerous?

From our report of Jan 2020 · not reviewed since

NextCoup is a PUP that promotes itself as a helpful browser add-on that provides all types of handy offers from the web

NextCoup is described as a browser add-on that allows gathering all types of beneficial deals from the Internet.

However, note that this is only a marketing strategy used to promote the app and it truly has deserved the reputation of a potentially unwanted program as it causes continuous pop-ups, banner ads, sponsored links, and similar distractions during people's browsing.

This program can hardly pose direct harm to the computer because the main thing, which is initiated by it, is these continuous pop-up notifications. However, some indirect danger can be brought through its redirecting sessions that we are going to discuss in the following paragraphs.

NextCoup can appear anywhere on the computer system and install additional objects in directories such as C:\Program Files\ or C:\ProgramData (if you are a Windows user). Additionally, the adware can initiate significant changes on web browsers and their homepage, new tab URL bars. Besides, once this browser add-on installs in your web browser settings, the extension can come in different types of names such as NextCoupp, NeXXXTCoup, or NextCOiuuP.

The advertising part of the article's culprit can be one of the most intrusive activities that will likely appear during the operation period of this adware program. It might start loading you with attractive-looking deals that offer to purchase rogue tools or services. You should decline any suggestions provided, especially those which ask you to type in some sensitive details, contact information, credential data, or urge an inadequate payment.

Nevertheless, NextCoup ads can easily turn your browsing into serious havoc because they may start appearing on each of your web browsers, including Internet Explorer, Google Chrome, Mozilla Firefox, and others. Besides, no matter how harmless they look (in most of the cases they report about discounts, coupons, price comparisons, and similar things) each of these ads has a link, which may redirect you where ever it wants.

It means that you may be tricked into entering not only a harmless shopping site. Also, you might be forced to visit an insecure site, which is used to spread more dangerous programs than this one.

This is how adware gets the chance to deliver malicious applications indirectly. As a matter of fact, this is a popular distribution technique used by various cyber criminals who tend to spread virtual parasites such as Trojan horses and ransomware viruses.

If you think that NextCoup virus has already infiltrated your computer, you should know that it can also start tracking your browsing on the web.

In most cases, such programs collect information about people's search terms, mostly visited websites, data that they enter on each of these sites, their email address, PC's location, etc. Afterward, the developers use such information for delivering it to other parties for income or initiating beneficial advertising campaigns.

So, as you can clearly see, you should remove NextCoup from your computer without wasting your time. Otherwise, it will keep initiating these previously mentioned activities and you will not be able to use your web browser properly anymore due to all these changes. If you want to do that ASAP, you should check the system with reliable anti-spyware like or .

In some cases, the removal might not be necessary. This is if your antivirus program does not find anything suspicious on your computer and if the activities from the app show up on your browser only occasionally.

Sometimes, you might start seeing annoying advertisements while visiting third-party apps but that does not always mean that you are infected with adware. Try downloading AdBlock and see if it stops the incoming notifications.

However, if NextCoup activities get very intrusive, you should not postpone the removal process, otherwise, your web browser and computer system might become very sluggish and not be able to carry out simple actions. Also, if you ever deal with this adware, try not to fall for its attractive-looking descriptions like the following one:

Screenshot of NextCoup: pup
NextCoup in our 2020 report.
NextCoup: next coup adware program
NextCoup in our 2020 report.

From our report of Jan 2020 · not reviewed since

More from our earlier report on NextCoup

  • If you have discovered some altered areas on your computer, you can try repairing them with

How NextCoup ads got into your browser

From our report of Jan 2020 · not reviewed since

Some potentially unwanted programs can be installed either voluntarily or not.

PUPs such as adware are sometimes promoted as "useful" extensions on their official websites and try to encourage people to install them. However, you should not opt for such an installation, as you will likely end up with a useless product on your computer.

However, the most common way to receive an adware program is through "software bundling". This happens when you get the PUP installed in a freeware or shareware package. Adware approaches those users who do not pay enough attention to the downloading process or have set the "Quick" installation mode as default.

In order to keep yourself safe from adware and similar threats, you should never skip any downloading or installing steps as some of them might recommend adding the PUP to your machine. Additionally, always make sure to choose the "Custom" installation mode and check out all suspicious products during the downloading process.

Besides "software bundling", there are other deceptive tactics that can be used by adware developers to distribute their suspicious products. For example, they might plant the PUP into an unsecured advert or hyperlink. Nevertheless, the adware can come disguised as a fake flash player update while visiting third-party networks.

Check your browser and PC

  • Address: lesvirus.fr

How to remove NextCoup ads

How to stop NextCoup notifications

Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.

Nothing has to be uninstalled for the notifications themselves.

Which browser shows the ads?

  1. Step 1: Remove lesvirus.fr from Chrome's notification list

    Chrome keeps a list of every site you once allowed to send notifications, and lesvirus.fr is on it. Paste chrome://settings/content/notifications into the address bar, find lesvirus.fr under Allowed to send notifications, open the three-dot menu next to it and pick Remove.

    Then click Add next to Not allowed to send notifications and type lesvirus.fr, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.

    Chrome Settings, Notifications page with the allowed and not allowed site lists
    Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications.

    Full procedure with screenshots: Stop website notifications and pop-ups

Instructions for Google Chrome

Remove from Google Chrome

To remove the adware from your Google Chrome web browser and diminish the suspicious changes that the app has initiated, follow these instructing steps.

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Then, whichever browser you use

  1. Step 2: Scan the PC if you downloaded anything from the ads

    If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.

    In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

More removal instructions

For programs installed on the PC and older browsers. Open the one you need.

Removing NextCoup virus from PCs

This virus will definitely show itself by displaying intrusive pop-ups on your computer screen and redirecting you to odd domains.

If you encounter these activities on your web browser and machine, note that there is an adware that requires a full elimination process, otherwise, you will still get lured in its intrusive tasks.

NextCoup removal is a process that can be performed with the help of automatical antimalware software or manual step-by-step guidelines that we have provided to you at the end of this article. Security experts from LesVirus.fr claim that using reliable products is the safest and most effective way to terminate the adware and all its added components.

However, if the fact of purchasing an antimalware program does not seem attractive to you, you can always try to remove NextCoup manually. Just keep in mind that this process requires cleaning both the operating system and infected web browser apps.

Uninstall from Windows

To clean your Windows computer system from annoying apps and erase all the additional products that were brought by the adware program, apply the following instructing guidelines.

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows

Protect your privacy - employ a VPN

There are several ways how to make your online time more private - you can access an incognito tab.

However, there is no secret that even in this mode, you are tracked for advertising purposes. There is a way to add an extra layer of protection and create a completely anonymous web browsing practice with the help of VPN. This software reroutes traffic through different servers, thus leaving your IP address and geolocation in disguise.

Besides, it is based on a strict no-log policy, meaning that no data will be recorded, leaked, and available for both first and third parties. The combination of a secure web browser and VPN will let you browse the Internet without a feeling of being spied or targeted by criminals.

No backups? No problem. Use a data recovery tool

If you wonder how data loss can occur, you should not look any further for answers - human errors, malware attacks, hardware failures, power cuts, natural disasters, or even simple negligence.

In some cases, lost files are extremely important, and many straight out panic when such an unfortunate course of events happen. Due to this, you should always ensure that you prepare proper data backups on a regular basis.

If you were caught by surprise and did not have any backups to restore your files from, not everything is lost. is one of the leading file recovery solutions you can find on the market - it is likely to restore even lost emails or data located on an external device.

Questions about NextCoup ads

Why do I get notifications from lesvirus.fr when the browser is closed?

Chrome and Edge can keep a small part running in the background so that sites can deliver notifications, and Windows shows them in its notification area. That is why messages from lesvirus.fr keep arriving with no browser window open.

The permission to send them was granted when someone clicked Allow on a prompt from that site, often disguised as a robot check or a video player. Closing the browser does not remove it; only the notification settings do.

Remove lesvirus.fr from the allowed sites and the background messages stop. You can also stop the browser from running in the background in its system settings, but the permission is the real fix.

Did a notification from lesvirus.fr infect my computer?

A notification cannot infect a PC. It is a short text with a link that the browser displays. Clicking it opens a page, and a page cannot install anything unless you agree to a download and run the file.

So the answer depends on what you did after clicking. Looked and closed: you are fine. Downloaded but did not open: delete the file.

Opened a downloaded file: uninstall what it added and scan the PC. Typed card or login details: contact the bank and change the password. In every case, remove lesvirus.fr from the browser's allowed notifications so the messages stop.

Why does NextCoup show me ads?

Because that is its whole purpose. NextCoup is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.

They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.

Is lesvirus.fr safe to visit?

No. The site lesvirus.fr exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.

Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.

Which browser is sending the lesvirus.fr notifications?

Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from lesvirus.fr came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.

If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.

How do I know the ads come from NextCoup?

Look for notifications from lesvirus.fr. That is the trace NextCoup leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.

A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.

An ad showed a phone number and I called it. What now?

The number belongs to scammers, not to Microsoft or an antivirus company. If you only talked, hang up and do not call back. If you let them connect to the PC, disconnect it from the internet, uninstall the remote access program they used, such as AnyDesk, TeamViewer, ScreenConnect or UltraViewer, and run a full and offline scan.

If you paid or gave bank details, call your bank at once on the number printed on your card. Change any passwords you typed while they were connected, and report the call.

Will Focus or Do not disturb stop the notifications?

Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.

Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.

Did clicking Allow install anything on my PC?

No. Allowing notifications stores a permission in the browser and nothing else. No file is downloaded and no program is added to Windows, which is also why antivirus scans find nothing. The risk comes later, from the notifications themselves: they lead to scam pages, fake updates and phishing forms.

Remove the permission in each browser where you allowed it. If you clicked a notification and downloaded something afterwards, delete that file and run a Microsoft Defender full scan and offline scan.

Will Fortect remove NextCoup?

No program removes NextCoup itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.

What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.

If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.

Sources

  1. Norton: What is a Trojan? Is it a virus or is it malware? (read October 6, 2026)
  2. LesVirus: LesVirus.fr (read October 6, 2026)
  3. Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
  4. FTC: How to recognize, remove and avoid malware (read October 6, 2026)
  5. Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)

More removal guides

Remove VideoBox virus

What should I know about VideoBox player? VideoBox virus is advertised as a free media player application that is able to open various video formats, download videos from Arabian versionAdwareMedium riskJake Doevan ·

Remove SaveFrom.net helper

SaveFrom.net Helper is a YouTube downloading service that might show intrusive ads and disrupt daily browsing sessions SafeForm Helper is a potentially unwanted program that might be used to download andAdwareMedium riskUgnius Kiguolis ·

Remove Google Lead Services

Google Lead Services is a bogus online advertising platform which has nothing in common with Google Google Lead Services, also known as GoogleLeadService.com, is fraudulent advertising platform which might lookAdwareMedium riskLucia Danes ·

Remove Stabilizeconnection.co.in ads

Stabilizeconnection.co.in is a push notification scam website you should not believe in Stabilizeconnection.co.in is a deceptive website that can be seen by users while browsing using Chrome, Firefox, Edge, orAdwareMedium riskUgnius Kiguolis ·

Questions and experiences: NextCoup ads

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,568 members already hereReading, writing, commenting and voting. 0 verified · 293 joined this year