Home Malware Programs Rogue Anti-Virus Programs IE Antivir 3.4

IE Antivir 3.4

Posted: January 10, 2011

IE Antivir 3.4 is rogue anti-virus software created to con computer users into purchasing a corrupt program. IE Antivir 3.4 displays fake security warnings and generates a list of spyware results in order to convince you that your PC is infected with malware. The full version of IE Antivir 3.4 will not fix your computer problems, it is a waste of money. The malware results from IE Antivir 3.4's scanner are actually valid Microsoft files that are used to look malicious. Do not attempt to manually remove the files IE Antivir 3.4 detects because it may lead to Windows not working correctly.

IE Antivir 3.4 is known to not only be bundled with a rootkit parasite but in some cases it could easily install another rogue anti-spyware application or malware that causes the system to be unstable. The longer IE Antivir 3.4 stays on the infected system the higher the risk for serious system damages. Use a reliable malware remover to make your PC stays clear of these types of threats.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %DesktopDir%\IE AntiVirus 3.4.lnk
    2 %ProgramFiles%\IEAntiVirus\ieav.db2
    3 %ProgramFiles%\IEAntiVirus\ieav.db3
    4 %ProgramFiles%\IEAntiVirus\scan.exe
    5 %ProgramFiles%\IEAntiVirus\uninst.exe
    6 %Programs%\IE AntiVirus 3.4.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Bind[HKEY_CURRENT_USER\Software\IEAntiVirus][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ThemeManager]HKEY..\..\..\..{RegistryKeys}DisplayIcon "%ProgramFiles%\IEAntiVirus\scan.exe,0"DisplayName = "IE AntiVirus"DisplayVersion = "3.4"InstallLocation = "%ProgramFiles%\IEAntiVirus"NoModify = 0x00000001NoRepair = 0x00000001Path = "%ProgramFiles%\IEAntiVirus"SystemID = 0x00000000UninstallString = "%ProgramFiles%\IEAntiVirus\Uninstall.exe"VersionMajor = 0x00000002VersionMinor = 0x00000002antispy = "%ProgramFiles%\IEAntiVirus\scan.exe"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IE AntiVirus]
Loading...