Home Malware Programs Trojans Trojan-IM.Win32.Faker.a

Trojan-IM.Win32.Faker.a

Posted: July 21, 2011

Trojan-IM.Win32.Faker.a is a seditious computer Trojan that occurs in pop-ups and security alerts shown fake anti-spyware and rogue programs. Trojan-IM.Win32.Faker.a displays a window which pretends to be MSN Messenger dialogue box. Then Trojan-IM.Win32.Faker.a asks computer users to type their MSN's account information into the box so that computer hackers can get your account message if you fill your password as needed. Remove Trojan-IM.Win32.Faker.a from your computer as quickly as possible after detection.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 iainstall.exe
    2 IAUpdater.exe
    3 IAvir.exe
    4 InternetAntivirus.exe
    5 iv.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "3P_UDEC_IA"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Internet Antivirus_is1
Loading...