Home Malware Programs Adware OfferApp Ads

OfferApp Ads

Posted: July 24, 2009

Threat Metric

Threat Level: 2/10
Infected PCs: 70
First Seen: July 24, 2009
OS(es) Affected: Windows

OfferApp is a browser extension that delivers product recommendations and price comparisons as in-browser advertisements. In addition to being a potential risk to your Web browser's health, some versions of OfferApp also may attempt to block their deletion or generate additional files in unusual locations. However, malware researchers have found no indications that deleting OfferApp will fail when assisted by appropriate anti-adware utilities and standard security precautions.

The Advertisement Offer You don't get a Chance to Refuse

Because of their ability to provide minute, but almost effortless revenue generation, advertising add-ons are continuing to be regularly developed over the months of the new year. Many of these, as malware researchers have seen with recent developments like Savifier or Boomdeal, provide their advertisements as supposedly positive features that offer access to new savings, coupons and time-limited offers. OfferAp is another example of shopping adware but also includes unusual file placement that could separate OfferApp from many brands of older PUPs.

The symptoms of an OfferApp installation remain typical for a Potentially Unwanted Program of the adware sub-category. Malware researchers advise watching for the following Web-browsing issues:

  • Additional graphical advertisements may insert themselves into Web pages unrelated to them.
  • Some text content may be modified to host hyperlinks to advertising content, which typically is identifiable by underlined keywords and pop-ups while scrolling your mouse over the links.
  • Some search engines may include additional, sponsored results from OfferApp advertisements, which may be identifiable by their sponsored content tags.

These functions are unlikely to provide any impact to your Web-browsing experience other than the potential for endangering your PC with unsafe advertisements. Of potentially more significance is the fact that malware researchers found most samples of OfferApp using questionable means of installation. Some of these characteristics, such as keeping backup executable files in the baseline Windows directory, could allow OfferApp to restore itself from a partial deletion.

Taking the Advertisements out of Your Applications

Along with all efforts in place to stop you from deleting its software, OfferApp also may be seen using some of the non-consensual install methods that malware researchers often associate with Potentially Unwanted Programs. Mislabeled installer files and bundles with other applications are two of the common exploits used to place adware on a computer without the user's full awareness, and may not require your consent before installing OfferApp. Current versions of OfferApp only are verifiable for Windows machines, although you can find other, similar adware products on all prominent operating systems.

Deleting Windows files may damage your operating system. For uninstalling OfferApp advertisements, a recommended solution is to use anti-adware products that can scan for, identify and quarantine all components of this adware without any manual intervention. With respect to thwarting the persistence of OfferApp, malware researchers also recommend closing unnecessary memory processes, and especially your browser, to avert OfferApp surviving any deletion attempt.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\windows\system32\offerapp.exe File name: C:\windows\system32\offerapp.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\programfiles\offerapp\offerapp.exe File name: C:\programfiles\offerapp\offerapp.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Related Posts

Loading...