Program:Win32/Pameseg.H is a Trojan that tries to steal money from unsuspecting computer users. Program:Win32/Pameseg.H attempts to urge victims to send a text message to a provided number, that would later ask installing a particular software product, which is, of course, paid. Program:Win32/Pameseg.H displays a fake pop-up notification on the affected PC’s screen created in French. The malicious software program states that it will install an MSN messenger, Internet Explorer, Adobe Flash Player, VLC Player, Windows Media Player, OpenOffice, Outlook Express, Counter Strike, Avira Antivirus, Audacity and many other programs, but if you follow its instructions you will see that the messenger you are preparing to install needs an activation code that will only be received after you send out a text message to the provided number.
NSIS.Hoax.ArchSMS.A [VBA32]NSIS:Downloader-HP [GData]Trojan.Agent/Gen-CDesc[Gen] [SUPERAntiSpyware]Program:Win32/Pameseg.H [Microsoft]TrojanDropper.Agent.acch [Jiangmin]TR/BegSMS.A [AntiVir]Trojan.Win32.Generic!BT [VIPRE]Win32.NSISHoax.ArchS [eSafe]NSIS:Downloader-HP [Trj] [Avast]TROJ_SPNR.03CG11 [TrendMicro-HouseCall]
More aliases (15)
Program:Win32/Pameseg.H Automatic Detection Tool (Recommended)
Is your PC infected with Program:Win32/Pameseg.H? To safely & quickly detect Program:Win32/Pameseg.H, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Program:Win32/Pameseg.H What happens if Program:Win32/Pameseg.H does not let you open SpyHunter or blocks the Internet?
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 %USERPROFILE%\ Mes documents\ Downloads\ install_openoffice_clic.exe 54
- The following messages's were detected:
# Message 1 'Pour obtenir votre code d’activation, veuillez envoyer depuis votre portable un SMS au numero 81015 avec le mot LP.' 2 'To obtain your activation code, please send an SMS from your cellphone number to 81015 with the word LP.'
Posted: June 19, 2012 | By SpywareRemove
Threat Level: 8/10
Rate this article:
Detection Count: 49