Home Malware Programs Adware Razor Web Ads

Razor Web Ads

Posted: May 29, 2015

Threat Metric

Ranking: 12,433
Threat Level: 2/10
Infected PCs: 1,197
First Seen: May 28, 2015
Last Seen: October 1, 2023
OS(es) Affected: Windows

Razor Web advertisements are a symptom of adware programs that may modify your browser's Web pages by forcing them to host extra advertising content. Razor syntax-based Web pages aren't always threatening, but, when they appear as a result of adware, they may cause a variety of minor issues for your PC. These symptoms may range from being unable to see a website's default content to being exposed to threatening content from the Razor Web. Traditional anti-adware solutions should be able to remove Razor Web by deleting the adware that loads its advertisements into your browser.

The Cutting Edge of Web Advertisements

Razor Web advertisements are loaded via Razor Syntax, an alternative to ASP.NET-based Web content. Because this material is light, easy to program and dynamic, some Web developers favor it as a means of delivering advanced e-content. Unfortunately, that content also may include potentially threatening adware advertisements, such as those seen in the self-identified Razor Web advertisements.

Malware researchers have seen recent incidents of non-consensual Razor Web advertisements in May of 2015 with the delivery vehicle an as-of-yet unidentified adware program. The format favored by the adware developer utilized an advertisement 'hijacking' technique, which allowed Razor Web to replace the default advertisement content of the affected Web pages. This HTML injection form may modify the browser's Web pages while they load and is unassociated with the underlying websites (which you may view as per normal from any unaffected system).

Adware products unscrupulous enough to hijack advertising traffic also may be a source of other problems of more direct concern to the safety of your PC. Problems that malware experts could link to a possible installation of Razor Web Ads adware may include:

  • Being redirected to undesirable or corrupted websites.
  • Suffering from exposure to online tactics, such as fake technical support offers, embedded in Razor Web.
  • Worsened website loading times, general browser instability or problems with accessing the content that may be blocked by injected Razor Web.

Dulling the Sting of Razor Web

You can best note Razor Web advertisements as abusive excesses of an otherwise safe and viable platform for Web development, and rarely are symptomatic of a threat infection. Despite that silver lining, adware products using Razor Web that install themselves automatically may be caused by the attacks of threats, along with general, unsafe file downloading habits. Regular anti-malware scans and a bare minimum level of caution about which browser add-ons you install can offer the most upfront protection from Razor Web advertisements appearing on your browser spontaneously.

If Razor Web advertisements already are being injected into your browser, restart your PC and use the Safe Mode boot option to disable any extraneous software. Scanning your PC with anti-adware products (or security products including anti-adware features) should be the only extra step needed to delete the adware responsible for creating Razor Web advertisements. However, an open Web browser is an easy way to prevent an essential add-on file from being removed. To compensate for this, malware analysts would encourage keeping your browser closed until your scans fail to turn up any new results.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\razorwebSOFTWARE\Wow6432Node\razorwebSYSTEM\ControlSet001\services\Service Mgr razorwebSYSTEM\ControlSet001\services\Update Mgr razorwebSYSTEM\ControlSet002\services\Service Mgr razorwebSYSTEM\ControlSet002\services\Update Mgr razorwebSYSTEM\CurrentControlSet\services\Service Mgr razorwebSYSTEM\CurrentControlSet\services\Update Mgr razorwebHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Razor Web

Additional Information

The following directories were created:
%PROGRAMFILES%\Razor Web%PROGRAMFILES(x86)%\Razor Web%temp%\Razor Web
The following URL's were detected:
www.myrazorweb.com
Loading...