shopathomewatcher.exe
By ShopAtHome.com (Signed)
Warning 3 antivirus scanners has detected malware in various versions of shopathomewatcher.exe.
Overview
There are 2 versions of shopathomewatcher.exe in the wild, the latest version being . shopathomewatcher.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 93.93 KB. The file is a digitally signed and issued to ShopAtHome.com by VeriSign. Some variations of the file have been seen to be installed with the program ShopAtHome.com Helper from Belcaro Group Inc.. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 1.15 MB with the maximum memory reaching around 2.57 MB.
What is shopathomewatcher.exe?
shopathomewatcher.exe is part of the Shop at Home Toolbar. When loaded by IE, it will install a toolbar in the top of your Internet Explore web browser. By installing itself, the toolbar has full access to the a loaded web page's HTML content and knowledge of the URL the user is currently viewing; it can also manipuate these depending on the intended function of the toolbar.
About shopathomewatcher.exe (from ShopAtHome.com)
“ShopAtHome.com is one of the largest websites offering free online coupons, grocery coupons, cash back rewards, free samples, restaurant coupons and contests. The site is unique from other online dea”
 Details
|
| File name: | shopathomewatcher.exe |
| Typical file path: | C:\users\user\appdata\roaming\shopathome\shopathomehelper\shopathomewatcher.exe |
| Certificate |
| Issued to: | ShopAtHome.com |
| Authority (CA): | VeriSign |
| Expiration date: | Friday, June 21, 2013 |
Programs installed in
(Note, the programs listed below are for all versions of shopathomewatcher.exe.)
This is the helper application that is installed with the ShopAtHome Toolbar (Browser App). "When you visit a website, whether typing in the URL or clicking a link (including from a search engine resu...
Behaviors
(Note, the behaviors below are for all versions of shopathomewatcher.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'ShopAtHomeWatcher' → C:\users\user\appdata\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exe
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
All file variations of shopathomewatcher.exe
