RankScan4.info Description
RankScan4.info is a browser hijacker promoting the rogue anti-spyware application called Internet Antivirus Pro. Due to affiliated trojan infiltrating the computer and modifying browser settings, web-surfing activities are redirected to the RankScan4.info domain. Here you are subject to a fake online scan that reports fictitious or exaggerated infection results in order to intimidate you into purchasing the fake spyware remover Internet Antivirus Pro.
Technical Information
File System Details
RankScan4.info creates the following file(s):
| # | File Name | Detection Count |
|---|---|---|
| 1 | IAPro.exe | N/A |
| 2 | ska.exe | N/A |
| 3 | ska.dll | N/A |
| 4 | c:\program files\Internet Antivirus\ | N/A |
Registry Details
RankScan4.info creates the following registry entry or registry entries:
Registry key
HKCU\..\Policies\Explorer\Run: [iv] "%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe"
HKCU\..\RunOnce: [3P_UDEC_IA] "%UserProfile%\Desktop\IAInstall.exe" 0;C;user_id=165639&uid=0
HKCU\..\Run: [Internet Antivirus] "c:\program files\Internet Antivirus\IAvir.exe" /s