Marezer.com

Marezer.com Description

Marezer.com or Marezer.net is a website created by criminals to convince users to purchase the fake security application called Antivirus Scan. Users infected with the trial version of Antivirus Scan will encounter Marezer.com frequently because once the rogue has entered a system it modifies the internet settings resulting in frequent redirections to Marezer.com. When a victim attempts to browse other websites, he/she will be presented with an online warning page before getting redirected to Marezer.com/shop. Users that click on any of the fake security alerts displayed by Antivirus Scan will also be redirected to Marezer.com. Stop the annoying browser redirects by using good security software that can detect and remove both Marezer.com and Antivirus Scan.

Technical Information

File System Details

Marezer.com creates the following file(s):
# File Name Detection Count
1 %Temp%\[random]\[random].exe N/A
2 %Temp%\[random]\ N/A

Registry Details

Marezer.com creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:59274"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"