Program:Win32/Pameseg.H

Program:Win32/Pameseg.H Description

Program:Win32/Pameseg.H is a Trojan that tries to steal money from unsuspecting computer users. Program:Win32/Pameseg.H attempts to urge victims to send a text message to a provided number, that would later ask installing a particular software product, which is, of course, paid. Program:Win32/Pameseg.H displays a fake pop-up notification on the affected PC’s screen created in French. The malicious software program states that it will install an MSN messenger, Internet Explorer, Adobe Flash Player, VLC Player, Windows Media Player, OpenOffice, Outlook Express, Counter Strike, Avira Antivirus, Audacity and many other programs, but if you follow its instructions you will see that the messenger you are preparing to install needs an activation code that will only be received after you send out a text message to the provided number.

Once executed, Program:Win32/Pameseg.H asks you to select a certain application you want to install. Then, the affected computer users has to agree with the terms and conditions, and finally, only after he/she sends the SMS, the supposed code is received that would allegedly enable victims to completely install the particular application. Alo, Program:Win32/Pameseg.H can change your web browser homepage to unwillingly divert you to one of its websites named wiiqi.com, pucuy.com or yaape.com.

Aliases

NSIS.Hoax.ArchSMS.A [VBA32]NSIS:Downloader-HP [GData]Trojan.Agent/Gen-CDesc[Gen] [SUPERAntiSpyware]Program:Win32/Pameseg.H [Microsoft]TrojanDropper.Agent.acch [Jiangmin]TR/BegSMS.A [AntiVir]Trojan.Win32.Generic!BT [VIPRE]Win32.NSISHoax.ArchS [eSafe]NSIS:Downloader-HP [Trj] [Avast]TROJ_SPNR.03CG11 [TrendMicro-HouseCall]

More aliases (15)

Program:Win32/Pameseg.H Automatic Detection Tool (Recommended)

Is your PC infected with Program:Win32/Pameseg.H? To safely & quickly detect Program:Win32/Pameseg.H, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Program:Win32/Pameseg.H What happens if Program:Win32/Pameseg.H does not let you open SpyHunter or blocks the Internet?

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

# File Name Detection Count

1 %USERPROFILE%\ Mes documents\ Downloads\ install_openoffice_clic.exe 54

#	File Name	Detection Count
1	%USERPROFILE%\ Mes documents\ Downloads\ install_openoffice_clic.exe	54

Additional Information

The following messages's were detected:

#	Message
1	'Pour obtenir votre code d’activation, veuillez envoyer depuis votre portable un SMS au numero 81015 avec le mot LP.'
2	'To obtain your activation code, please send an SMS from your cellphone number to 81015 with the word LP.'

Posted: June 19, 2012 | By SpywareRemove