Home Malware Programs Adware Ads by Customer Promos

Ads by Customer Promos

Posted: February 2, 2016

Threat Metric

Threat Level: 2/10
Infected PCs: 473
First Seen: February 2, 2016
Last Seen: February 19, 2023
OS(es) Affected: Windows

Customer Promos is adware that may enter automatically and generate various online ads. Rarely do these extensions may benefit the PC user. They are primarily created to take advantage of the online activities of computer users. Although the official site of Customer Promos claims that it will enhance your surfing experience, this add-on, in reality, may achieve the contrary. After the installation of this adware, you may start seeing more pop-ups, banners and interstitial ads than usual. Customer Promos may replace the page-based commercial materials with its offers that may consist of discounts, coupons and exclusive deals. The new ads are more persistent than the traditional ads on the sites. Even pages that were previously ad-free may start showing marketing materials by Customer Promos. The process may, soon enough, become annoying. The ads may cover a substantial area of your screen. In some cases, they may even block essential page buttons. Some of the commercial materials such as the embedded videos may worsen the performance of Google Chrome, Mozilla Firefox and Internet Explorer. The loading speed may drop, and your surfing sessions may get interrupted by freezes and crashes occasionally. Customer Promos may promote third-party sites for referral commissions. The intention to add more affiliate pages means that Customer Promos may include some compromised site eventually. If the ads redirect you to such pages, you may get tricked into installing threatening software or dialing con artists for help. There is no way to know which ads are safe and which may endanger your system, so you should avoid them all. In almost all cases, Customer Promos may arrive when the user installs a software bundle. After the attachment of Customer Promos to your Web clients, you may need professional help to delete it.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\CustomerPromosSoftware\Microsoft\Internet Explorer\Approved Extensions\{7DB5DD0A-9146-4969-8449-47BEBFFB5146}SOFTWARE\Wow6432Node\CustomerPromosSYSTEM\ControlSet001\services\Service Mgr CustomerPromosSYSTEM\ControlSet001\services\Update Mgr CustomerPromosSYSTEM\ControlSet002\services\Service Mgr CustomerPromosSYSTEM\ControlSet002\services\Update Mgr CustomerPromosSYSTEM\CurrentControlSet\services\Service Mgr CustomerPromosSYSTEM\CurrentControlSet\services\Update Mgr CustomerPromosHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Customer Promos

Additional Information

The following directories were created:
%PROGRAMFILES%\Customer Promos%PROGRAMFILES(x86)%\Customer Promos%temp%\Customer Promos
The following URL's were detected: