Home | About us | Download | How to install Spyware Doctor | Contact us
Home » Internet Antivirus Pro

Internet Antivirus Pro - Misleading Application

1. Introduction

Internet Antivirus Pro is a rogue computer security program, which imitates antivirus software. Infection is initiated by opening a webpage, which simulates My Computer window, displaying hard disks and folders with trojans and viruses in them. Imitated scan process is displayed below. Closing or clicking the window will result in Internet Antivirus Pro download and installation. It is not recommended to use the "X" or Alt+F4 to close the window; end iexlorer.exe process with task manager instead.

Although the program is unable to remove viruses and other malware, it's acting like an ordinary antivirus software:
  • scans computer system for any threats;
  • generates report with a list of various virus names;
  • pops warning windows, that alert user about threats detected.
All of the above mentioned actions are used to scare user and make him into purchasing fake computer security product. Virus names in the report are usually non-existent or not present on computer, unless Internet Antivirus Pro dropped any by itself. The rest of viruses are displayed under legal Windows files.

Internet Antivirus Pro will display fake Windows Security Center very similar to original one, so it very tricky not to walk into a trap:
  • in all sections (Firewall, Automatic Updates and Virus protection) there's a link (How does antivirus software help protect my computer?) to payment page, where victim will be asked to buy rogue program;
  • clicking on Recommendations button, registration form will open, asking to enter the key for the program.
  • balloon type "Privacy Violation alert!" will pop up time to time on the fake Windows Security Center icon in taskbar area: Internet Antivirus Pro detected a Privacy Violation. A program is secretly sending your private data to an untrusted internet host. Click here to block this activity by removing the threat (Recommended).
Internet Antivirus Pro will create corrupt winlogon.exe, services.exe processes. Trying to end the main infection process IAPro.exe with Task Manager will result in process restart, thus enabling rogue program to run again.

2. Internet Antivirus Pro removal tools:

  1. Malwarebytes' Anti-Malware (for the installation guide click here)
  2. Spyware Doctor (for the installation guide click here)

3. Screenshot:

Internet Antivirus Pro

4. Internet Antivirus Pro files:

IAPro.exe, services.exe, winlogon.exe

5. Hijackthis entries:

O4 - HKCU\..\Run: [Microsoft Windows logon process] C:\Documents and Settings\000\Application Data\Microsoft\Windows\winlogon.exe
O4 - HKCU\..\Run: [Internet Antivirus Pro] "c:\program files\Internet Antivirus Pro\IAPro.exe" /s
O23 - Service: Guard Service (ITGrdEngine) - Unknown owner - C:\Documents and Settings\000\Local Settings\Application Data\Microsoft\Windows\services.exe
© 2007-2010 All Rights Reserved. Unauthorized use of any data on pcindanger.com is prohibited.
Home | Contact Us | Terms of Use