Home Rogue Websites FuseScan6.com

FuseScan6.com

Posted: May 12, 2009

FuseScan6.com is a browser hijacker sponsoring the fake spyware remover known as Internet Antivirus Pro. It accomplishes this goal by infiltrating your PC with trojan viruses and altering your browser settings, causing web-surfing activities to be interrupted and diverted to the FuseScan6.com web page. Here your computer is subject to a free, albeit fake, online scan that reports fraudulent infection results in order to persuade you to purchase Internet Antivirus Pro.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 IAPro.exe
    2 ska.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKCU\..\Policies\Explorer\Run: [iv] "%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe"HKCU\..\Run: [Internet Antivirus] "c:\program files\Internet Antivirus\IAvir.exe" /sHKCU\..\RunOnce: [3P_UDEC_IA] "%UserProfile%\Desktop\IAInstall.exe" 0;C;user_id=165639&uid=0
Loading...