Marezer.com

By Domesticus in Rogue Websites

Marezer.com or Marezer.net is a website created by criminals to convince users to purchase the fake security application called Antivirus Scan. Users infected with the trial version of Antivirus Scan will encounter Marezer.com frequently because once the rogue has entered a system it modifies the internet settings resulting in frequent redirections to Marezer.com. When a victim attempts to browse other websites, he/she will be presented with an online warning page before getting redirected to Marezer.com/shop. Users that click on any of the fake security alerts displayed by Antivirus Scan will also be redirected to Marezer.com. Stop the annoying browser redirects by using good security software that can detect and remove both Marezer.com and Antivirus Scan.

File System Details

Marezer.com may create the following file(s):
# File Name Detections
1. %Temp%\[random]\[random].exe
2. %Temp%\[random]\

Registry Details

Marezer.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:59274"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"

Trending

Most Viewed

Loading...