Scan4note.com
Scan4note.com is a browser hijacker promoting the rogue anti-spyware application called Internet Antivirus Pro. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are interrupted and redirected to the Scan4note.com domain. Here the compromised machine is made a subject of a fake online scan that reports various fictitious and exaggerated infection results in order to intimidate the user into purchasing the fake spyware removal software, Internet Antivirus Pro.
File System Details
Scan4note.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %LOCAL APPDATA%\Microsoft\Windows\services.exe | |
| 2. | iapro.exe | |
| 3. | %LOCAL APPDATA%\Microsoft\Internet Explorer\iv.exe | |
| 4. | iainstall.exe | |
| 5. | InternetAntivirusPro.exe | |
| 6. | %APPDATA%\Microsoft\Windows\winlogon.exe | |
| 7. | %Program Files%\Internet Antivirus Pro\iapro.exe | |
| 8. | install.exe |
Registry Details
Scan4note.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\run "iv":
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Antivirus Pro
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Runonce "3p_udec_ia"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Antivirus Pro"
