Offer-provider.com
Offer-provider.com is a browser hijacker promoting three different rogue anti-spyware applications; VirusRemover 2009, Secure Expert Cleaner and SpywareRemover 2009. Due to minute alterations in the URL extensions, Offer-provider is able to sponsor all three of these rogue security products. It does this by infiltrating your system with affiliated trojan viruses, which modify browser settings in order to redirect web-surfing activities to the Offer-provider.com domain. Here your computer is subject to a fake online scan that displays numerous fictitious infection results, seeking to frighten you into purchasing and downloading one of the three fake spyware remover programs advertised.
File System Details
Offer-provider.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Program Files%\VirusRemover2009\VRM2009.exe | |
| 2. | VirusRemover2009.lnk | |
| 3. | %Program Files%\VirusRemover2009\Viruses.bdt |
Registry Details
Offer-provider.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Virus Remover 2009"
HKEY_LOCAL_MACHINE\SOFTWARE\{5222008A-DD62-49c7-A735-7BD18ECC7350}
HKEY_LOCAL_MACHINE\SOFTWARE\VirusRemover2009\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\VirusRemover2009
