Home Malware Programs Adware rePrice

rePrice

Posted: January 16, 2015

Threat Metric

Threat Level: 2/10
Infected PCs: 169
First Seen: January 16, 2015
Last Seen: October 17, 2021
OS(es) Affected: Windows

rePrice is adware that may show sponsored links, offers, pop-up advertisements, deals and discount coupons on shopping-related websites and social networks, or other legitimate websites that might have been infected by browser hijackers or adware. rePrice pop-up advertisements may be shown as boxes, which may include numerous discount coupons that, if clicked, may overlay the computer's desktop with a pop-up advertisement that declares to be allegedly sent to the computer user by rePrice. rePrice might be produced particularly to generate a profit from advertisement clicks. rePrice may raise websites traffic diverting the browser extension for Internet Explorer, Mozilla Firefox and Google Chrome when the PC user installs other free applications that might have PUPs or adware packaged into their installation wizard.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{2C776F39-2849-4D43-AEF3-C2F8476BC90A}Software\Microsoft\Internet Explorer\Approved Extensions\{968B9C5F-9D79-3863-CF0A-0E80D812E4C5}Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{968B9C5F-9D79-3863-CF0A-0E80D812E4C5}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{968B9C5F-9D79-3863-CF0A-0E80D812E4C5}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{968B9C5F-9D79-3863-CF0A-0E80D812E4C5}

Additional Information

The following directories were created:
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\ojhofejkfpklkjomffhflcecnggjedjb%PROGRAMFILES%\Reprice%PROGRAMFILES(x86)%\Reprice%USERPROFILE%\AppData\LocalLow\Toolbar4\{968B9C5F-9D79-3863-CF0A-0E80D812E4C5}
Loading...