OffersWizard

OffersWizard

by OffersWizard-software

What is OffersWizard?

OffersWizard is software application developed by OffersWizard-software. It is most commonly found on computers running Windows 7 with nearly 72.45% of installations running this operating system. OffersWizard's installer is typically 3.00 MB in size and installs around 11 files.

OffersWizard is most popular in the United States with 37.43% of installations residing in this country.

OffersWizard adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About OffersWizard?

This is a type of ad injector malware that is often distributed as part of bundled software offers for legitimate programs. Once installed, it can be difficult to remove and has the potential to compromise the security of the user's computer by displaying intrusive advertisements in the web browser. These ads can lead to the installation of other unwanted adware or malware. Upon installation, the malware runs as a startup process in the background and injects ads into web pages, either by adding new ads or replacing existing ones. These ads often promote low-quality products and potentially malicious content. The malware achieves this by intercepting the user's web browser connections and injecting new content before the page is served to the user. It is important to note that this variant is a part of the CMI/WinCheck family of adware.

Software Behaviors

Services:
  • B9eG190.exe runs as a service named 'OffersWizard' (OffersWizard) "OffersWizard".
Scheduled tasks:
  • e6OffersWizard66.exe is scheduled as a task named 'OffersWizard Update' (runs daily at 5:23 PM).

Startup Entries

Startup tasks:
  • e6OffersWizard66.exe is automatically launched at startup through a scheduled task named OffersWizard Update.

Software Details

URL:
Support:
Installation path:
C:\Program Files\ver2offerswizard
Uninstaller:
C:\Program Files\ver2OffersWizard\Uninstall.exe
Size:
3.00 MB
Language:
English

OffersWizard Executable Details

Primary executable:
uninstall.exe
Name:
OffersWizard
Path:
C:\Program Files\ver2offerswizard\uninstall.exe
MD5:
9afeb11ed616a10f6c5d44a04fbe3797
SHA-1:
SHA-256:
Files installed by OffersWizard
File Type Filename MD5
CRX
d6bd9d5fa99e19ed0fc5be6113bc489d