Trojan.FakeIA

Trojan.FakeIA consists of a group of Trojan infections which are used to promote such rogue antispyware applications as Internet AntiVirus. There is more than one version of this Trojan, for example, Trojan.FakeIA.A, Trojan.FakeIA.C, Trojan.FakeIA.D and a few others. There is even a Trojan downloader in this group of infections, which is designed to download the infection and be a component of a rogue program.

Download Spyware Removal Tool to Remove* Trojan.FakeIA

Quick & tested solution for Trojan.FakeIA removal.
100% Free Scan for Windows

Not only does Trojan.FakeIA promote malicious software, it can also be installed by other malware. This feature can be attributed to Trojan.FakeIA.I which is also distributed as DLL component. This version of the Trojan loads itself into every computer process and then meddles with the system’s application programming interfaces so it could hide processes and registry entries which are related to the infection. For example, the Trojan hides wmsclock.exe process which is a fraudulent security program.

The creators of Trojan.FakeIA also infiltrate or set up certain websites with JavaScript-enabled objects. If a user visits these sites or gets redirected to them, these objects flood him with fake security alerts which are supposed to make the user download a fake security program. For example, the Trojan might not allow you to load your preferred website. Instead it might display a warning that “visiting this web site may harm your computer”. Then you are offered to “Click here” to get “full advanced real-time protection”. This happens because the Trojan performs various changes to the system and makes it to embed a certain script into the websites the user browses. Once that script is enabled, it displays fake virus warnings, and then the user is urged to download additional files with even more malware.

One of the reasons why the user might fall into the Trojan.FakeIA trap is that it can impersonate legitimate Microsoft products. Along with its messages the Trojan can show product names and logos which are very similar to the official ones. For example, one of the warnings is as follows:

Security Center Alert
To help protect your computer, Windows Firewall has blocked activity of harmful software.
Do you want to block this suspicious software?
Name: Spyware.ISpynow
Risk Level: High
Description: iSpynow is a Spyware program that records keystrokes and takes screen shots of the computer, stealing personal financial information

It is obvious that Trojan.FakeIA is pretending to be a part of Windows Security Center. The Trojan acts this way because it wants the user to download rogue security products, which eventually might lead to a money theft. The Trojan also does not allow you to perform the most basic processes on your computer, so you must remove Trojan.FakeIA from your system immediately, because it is an annoying parasite which can only lead to an even greater infection affecting your computer.

Download Spyware Removal Tool to Remove* Trojan.FakeIA

Quick & tested solution for Trojan.FakeIA removal.
100% Free Scan for Windows

How to manually remove Trojan.FakeIA

Files associated with Trojan.FakeIA infection:

kplalk.dll
services.exe
cijwg16225165.exe
visfdw.exe
pg32.exe
procgdbu32.exe
procgdqn32.exe
mjkspc.dll
mjkovl.dll
mjkdpl.dll
sshnas21.dll
dfxvideo.dll
upddpl.dll
fwlmsk.dll
setupupdate70700.exe
fhexj6825097.exe
pzpsp23511834.exe
mupd1_2_12916358.exe
dfxscc.dll

Trojan.FakeIA DLL's to remove:

kplalk.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll
sshnas21.dll

Trojan.FakeIA processes to kill:

services.exe
cijwg16225165.exe
visfdw.exe
pg32.exe
procgdbu32.exe
procgdqn32.exe
setupupdate70700.exe
fhexj6825097.exe
pzpsp23511834.exe
mupd1_2_12916358.exe

Remove Trojan.FakeIA registry entries:

HKEY_CURRENT_USERSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN asus32
HKEY_CURRENT_USERSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN windpipe
HKEY_CURRENT_USERSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN winlogone
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ asus32
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ windpipe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winlogone
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN realteke
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN winsvcon
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ realteke
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winsvcon
RUNNING PROGRAMExplorer.EXE
RUNNING PROGRAMpg32.exe
RUNNING PROGRAMprocgdbu32.exe
RUNNING PROGRAMprocgdqn32.exe
RUNNING PROGRAMservices.exe
RUNNING PROGRAM\Explorer.EXE
RUNNING PROGRAM\pg32.exe
RUNNING PROGRAM\procgdbu32.exe
RUNNING PROGRAM\procgdqn32.exe
RUNNING PROGRAM\services.exe

Post comment — WE NEED YOUR OPINION!