Antick.Info
Antick.Info is a browser hijacker promoting the distribution of the rogue anti-spyware application known as Internet Antivirus Pro. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Antick.Info domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing and downloading the fake spyware remover Internet Antivirus Pro.
File System Details
Antick.Info may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %LOCAL APPDATA%\Microsoft\Windows\services.exe | |
| 2. | iapro.exe | |
| 3. | %LOCAL APPDATA%\Microsoft\Internet Explorer\iv.exe | |
| 4. | iainstall.exe | |
| 5. | InternetAntivirusPro.exe | |
| 6. | %APPDATA%\Microsoft\Windows\winlogon.exe | |
| 7. | %Program Files%\Internet Antivirus Pro\iapro.exe | |
| 8. | install.exe |
Registry Details
Antick.Info may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\run "iv":
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Antivirus Pro
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Runonce "3p_udec_ia"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Antivirus Pro"
