Home Rogue Websites Iantiviruspro.com

Iantiviruspro.com

Posted: May 11, 2009

Iantiviruspro.com is home to the extremely dangerous and misleading program called Internet Antivirus Pro, which is classified as a rogue anti-spyware application. Typically Iantiviruspro.com is visited due to trojans infiltrating your computer and modifying the browser settings so that your web-surfing activities are redirected to this malicious domain. Besides the obsessive adware praising Internet Antivirus Pro’s security capabilities, a fake online scanner offers to scan your system for free, and most often always results in numerous false infection reports. All of this occurs in order to persuade you to purchase the fake spyware remover Internet Antivirus Pro.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %APPDATA%\Microsoft\Windows\winlogon.exe
    2 %LOCAL APPDATA%\Microsoft\Internet Explorer\iv.exe
    3 %LOCAL APPDATA%\Microsoft\Windows\services.exe
    4 %Program Files%\Internet Antivirus Pro\iapro.exe
    5 iainstall.exe
    6 iapro.exe
    7 install.exe
    8 InternetAntivirusPro.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Antivirus ProHKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\run "iv":HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Antivirus Pro"HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Runonce "3p_udec_ia"
Loading...