is a browser hijacker promoting the rogue anti-spyware application called Internet Antivirus Pro. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are interrupted and redirected to the domain. Here the compromised machine is made a subject of a fake online scan that reports various fictitious and exaggerated infection results in order to intimidate the user into purchasing the fake spyware removal software, Internet Antivirus Pro.

File System Details may create the following file(s):
# File Name Detections
1. %LOCAL APPDATA%\Microsoft\Windows\services.exe
2. iapro.exe
3. %LOCAL APPDATA%\Microsoft\Internet Explorer\iv.exe
4. iainstall.exe
5. InternetAntivirusPro.exe
6. %APPDATA%\Microsoft\Windows\winlogon.exe
7. %Program Files%\Internet Antivirus Pro\iapro.exe
8. install.exe

Registry Details may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\run "iv":
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Antivirus Pro
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Runonce "3p_udec_ia"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Antivirus Pro"


Most Viewed