Home Rogue Websites Star4Scan.com

Star4Scan.com

Posted: April 17, 2009

Star4Scan.com is a malicious website that may hijack your browser. Star4Scan.com is known to advertise and offer the Internet Antivirus Pro rogue anti-spyware application. Star4Scan.com may claim that Internet Antivirus Pro is a legitimate anti-spyware application but it is far from it. Star4Scan.com and the infections that could be installed from it should be detected and removed with a good anti-spyware program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %APPDATA%\Microsoft\Windows\winlogon.exe
    2 %LOCAL APPDATA%\Microsoft\Internet Explorer\iv.exe
    3 %LOCAL APPDATA%\Microsoft\Windows\services.exe
    4 %Program Files%\Internet Antivirus Pro\iapro.exe
    5 iainstall.exe
    6 InternetAntivirusPro.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Antivirus ProHKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\run "iv":HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Antivirus Pro"HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Runonce "3p_udec_ia"
Loading...