Home Rogue Websites Bonuspromooffer.com

Bonuspromooffer.com

Posted: April 6, 2009

Bonuspromooffer.com is a malicious hijack website that spreads the Virus Remover 2009 rogue anti-spyware application. It does this by way of a Trojan infecting your system and modifying your browser settings, causing any web surfing activities to become interrupted and redirected to the Bonusofferpromo.com web page.

Additionally, security alerts and dozens of annoying pop-ups alert you to numerous fake infections and suggest purchasing and installing Virus Remover 2009 in order to clean and protect your computer system from future attack. However, Virus Remover 2009 does absolutely nothing for your system, other than slow performance and occasionally cause computer crashes.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRemover2009.lnk
    2 %UserProfile%\Desktop\VirusRemover2009.lnk
    3 C:\Documents and Settings\All Users\Start Menu\Programs\VirusRemover2009
    4 C:\Documents and Settings\All Users\Start Menu\Programs\VirusRemover2009\VirusRemover2009.lnk
    5 C:\Program Files\VirusRemover2009
    6 C:\Program Files\VirusRemover2009\ExtSecurityCenter.exe
    7 C:\Program Files\VirusRemover2009\ExtSecurityCenter.ini
    8 C:\Program Files\VirusRemover2009\ExtSecurityCenter.xml
    9 C:\Program Files\VirusRemover2009\ni_d.exe
    10 C:\Program Files\VirusRemover2009\PP.exe
    11 C:\Program Files\VirusRemover2009\Uninstall.exe
    12 C:\Program Files\VirusRemover2009\Viruses.bdt
    13 C:\Program Files\VirusRemover2009\VRM2009.exe
    14 ExtSecurityCenter.exe
    15 VirusRemover2009
    16 VirusRemover2009.lnk

2 Comments

Loading...