Home Malware Programs Worms W32.Pavsee.C

W32.Pavsee.C

Posted: July 16, 2009

W32.Pavsee.C is a computer worm that may be related to the distribution campaign of Personal Antivirus fake spyware remover. Once it has infiltrated your PC and become active, W32.Pavsee.C launches fake security alerts notifying you of a virus detected that contaminates .com and .exe files on mapped drives from C to F. Of course, these notifications should not be taken too seriously, as they are merely a tactic used to scare you into purchasing Personal Antivirus, which you are prompted to do in order to protect your computer from this threat.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Drive%\[Random].com
    2 %Drive%\[Random].exe
    3 %ProgramFiles%\[INFECTED FILE NAME].exe.com
    4 %UserProfile%\Start Menu\Programs\Startup\[INFECTED FILE NAME].exe.pif
Loading...