Home Rogue Websites LuxScan4.com

LuxScan4.com

Posted: April 21, 2009

LuxScan4.com is a rogue website with malicious scripts, promoting the dangerous rogue anti-spyware application Internet Antivirus Pro. Redirection to this domain is typically caused by Zlob trojans infiltrating your PC without your knowledge and modifying your browser settings. Once you eventually end up at the LuxScan4.com webpage, you are subject to a false system scan that reports numerous fake infections, all in order to trick you into purchasing Internet Antivirus Pro.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 iaupdater.exe
    2 iavir.exe
    3 internetantiviruspro.exe
    4 ska.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet antivirus proHKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run iv:HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run internet antivirus proHKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce 3p_udec_ia:
Loading...