Home Rogue Websites New4scan.info

New4scan.info

Posted: March 31, 2009

New4scan.info is a hijacker website. New4scan.info may be created by the same group of hackers that develop and distribute Internet Antivirus Pro which is a rogue anti-spyware program. New4scan.info may be set as your home page indicating that you must remove this vicious infection or you could risk download or installation of other malicious applications without your permission. It is recommended that you remove New4scan.info and Internet Antivirus Pro files immediately to prevent further harm to your computer and your privacy.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %APPDATA%\Microsoft\Windows\winlogon.exe
    2 %LOCAL APPDATA%\Microsoft\Internet Explorer\iv.exe
    3 %LOCAL APPDATA%\Microsoft\Windows\services.exe
    4 %Program Files%\Internet Antivirus Pro\iapro.exe
    5 iainstall.exe
    6 iapro.exe
    7 install.exe
    8 InternetAntivirusPro.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Antivirus ProHKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\run "iv"HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Antivirus Pro"HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Runonce "3p_udec_ia"
Loading...