Home Malware Programs Adware Adware.OfferBoulevard

Adware.OfferBoulevard

Posted: September 9, 2014

Threat Metric

Ranking: 10,948
Threat Level: 2/10
Infected PCs: 8,434
First Seen: September 9, 2014
Last Seen: February 21, 2025
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\OfferBLVD\OfferBLVDW.exe File name: OfferBLVDW.exe
Size: 307.2 KB (307200 bytes)
MD5: b495060f243a35e3f579b71d51f65c58
Detection count: 2,096
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\OfferBLVD\OfferBLVDW.exe
Group: Malware file
Last Updated: December 13, 2020

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\System32\Tasks\offer boulevard%WINDIR%\Tasks\offer boulevard.jobHKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Tracing\OfferBLVDW_RASAPI32SOFTWARE\Microsoft\Tracing\OfferBLVDW_RASMANCSSOFTWARE\Microsoft\Tracing\OfferBoulevardW_RASAPI32SOFTWARE\Microsoft\Tracing\OfferBoulevardW_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\offer boulevard.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\offer boulevard.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\offer boulevardSoftware\Microsoft\Windows\CurrentVersion\App Paths\OfferBLVD.exeSoftware\Microsoft\Windows\CurrentVersion\App Paths\OfferBoulevard.exeSOFTWARE\Microsoft\Windows\CurrentVersion\Run\OfferBLVDSOFTWARE\Microsoft\Windows\CurrentVersion\Run\OfferBoulevardSoftware\OfferBLVDSOFTWARE\Wow6432Node\Microsoft\Tracing\OfferBLVDW_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\OfferBLVDW_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\OfferBoulevardW_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\OfferBoulevardW_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\OfferBLVD.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\OfferBoulevard.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\OfferBLVDSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\OfferBoulevardSYSTEM\ControlSet001\services\OfferBLVDSYSTEM\ControlSet001\services\OfferBoulevardSYSTEM\ControlSet002\services\OfferBoulevardSYSTEM\CurrentControlSet\services\OfferBLVDSYSTEM\CurrentControlSet\services\OfferBoulevardHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}offer boulevardOfferBLVDOfferBoulevard

Additional Information

The following directories were created:
%PROGRAMFILES%\OfferBLVD%PROGRAMFILES%\OfferBoulevard%PROGRAMFILES(x86)%\OfferBLVD%PROGRAMFILES(x86)%\OfferBoulevard%appdata%\offerboulevard
Loading...