Home Malware Programs Spyware IEAntiSpyware

IEAntiSpyware

Posted: May 29, 2008

IEAntiSpyware, or IE AntiSpyware 3.2, is a rogue anti-spyware program due to its deceptive and aggressive advertising practices. IE AntiSpyware and its marketing affiliates are distributing and installing IE AntiSpyware's anti-spyware program through a download which is bundled with a trojan triggered by a browser helper object (BHO). Many of these trojan bundled downloads are located in sites which offer a "video codec" to be able to view free adult entertainment videos.

After your PC is infected with the trojan bundled download, it keeps showing up a popup stating "NOTICE: Your system is infected and your computer performance is not at the highest level. Full system optimization will greatly increase your computer's performance and prevent data loss". When you click on the popup, it will direct your IE to www.IEAntiSpyware.com to download IE AntiSpyware's anti-spyware program.

In addition, the trojan which came bundled from either IE AntiSpyware and/or its affiliates hijacks your search engines, such as Google, Yahoo and MSN, and displays a fake error message within your search results claiming that your system is infected and offering to buy the IE AntiSpyware program. Once you click on this fake error message you will be redirected to IE AntiSpyware's home site where you will be tricked into buying IE AntiSpyware's anti-spyware application.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ie antispyware.lnk
    2 ieas.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\ieantispyware

One Comment

Loading...