Home Malware Programs Adware not-a-virus:AdWare.Win32.FakeInstaller.wu

not-a-virus:AdWare.Win32.FakeInstaller.wu

Posted: November 20, 2009

not-a-virus:AdWare.Win32.FakeInstaller.wu is a malicious adware program that displays banner adverts and sends personal user information to a central server for hackers to gain access to it. not-a-virus:AdWare.Win32.FakeInstaller.wu is installed via shareware and freeware programs. not-a-virus:AdWare.Win32.FakeInstaller.wu will monitor the user's Internet activity and then display advertisement banners and popups in the infected machine based on the websites the user visited. Remove not-a-virus:AdWare.Win32.FakeInstaller.wu immediatley and do not give the malicious program any time to do its devious dirty work.

Aliases

not-a-virus:AdWare.Win32.FakeInstaller (Ikarus)
Win-Trojan/Xema.variant (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %DesktopDir%\?etaf??t?ste p?????��ata.url
    2 %Favorites%\?etaf??t?ste p?????��ata.url
    3 %Programs%\?etaf??t?ste p?????��ata.url

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

One Comment

  • John Ambang says:
    November 23, 2009 at 11:39 pm

    I want to remove Rontokobro (Win32) file from my computer. It cannot be removed y smyantec. Please assit me to revome this worm.

    Thanks
    John

Loading...