Everscan4.info
Everscan4.info is a rogue website that promotes and spreads the fake spyware remover called Internet Antivirus Pro. Everscan4.info performs this task by first infecting your system with a backdoor trojan that modifies your browser settings in order to redirect your web-surfing activities to the Everscan4.info domain. Once relocated here, your computer will be subject to a fake online scan that reports copious amounts of parasites and infections - all of which are entirely fabricated - in order to intimidate you into purchasing and installing their rogue anti-spyware program, Internet Antivirus Pro.
File System Details
Everscan4.info may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %LOCAL APPDATA%\Microsoft\Windows\services.exe | |
| 2. | iapro.exe | |
| 3. | %LOCAL APPDATA%\Microsoft\Internet Explorer\iv.exe | |
| 4. | iainstall.exe | |
| 5. | InternetAntivirusPro.exe | |
| 6. | %APPDATA%\Microsoft\Windows\winlogon.exe | |
| 7. | %Program Files%\Internet Antivirus Pro\iapro.exe | |
| 8. | install.exe |
Registry Details
Everscan4.info may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\run "iv":
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Antivirus Pro
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Runonce "3p_udec_ia"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Antivirus Pro"
