Offer-provider.com

Offer-provider.com Description

Offer-provider.com is a browser hijacker promoting three different rogue anti-spyware applications; VirusRemover 2009, Secure Expert Cleaner and SpywareRemover 2009. Due to minute alterations in the URL extensions, Offer-provider is able to sponsor all three of these rogue security products. It does this by infiltrating your system with affiliated trojan viruses, which modify browser settings in order to redirect web-surfing activities to the Offer-provider.com domain. Here your computer is subject to a fake online scan that displays numerous fictitious infection results, seeking to frighten you into purchasing and downloading one of the three fake spyware remover programs advertised.

Technical Information

File System Details

Offer-provider.com creates the following file(s):
# File Name Detection Count
1 %Program Files%\VirusRemover2009\VRM2009.exe N/A
2 VirusRemover2009.lnk N/A
3 %Program Files%\VirusRemover2009\Viruses.bdt N/A

Registry Details

Offer-provider.com creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Virus Remover 2009"
HKEY_LOCAL_MACHINE\SOFTWARE\{5222008A-DD62-49c7-A735-7BD18ECC7350}
HKEY_LOCAL_MACHINE\SOFTWARE\VirusRemover2009\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\VirusRemover2009