Danger level 8
Type: Malware

Trojan.FakePowav

Trojan.FakePowav is related to Spyware. Your computer\'s security and privacy may be at risk.

Trojan.FakePowav is further classified by many experts as the following:
* Worm
* Cloaked Malware

The following are symptoms associated with this type of malicious application:

* Allows parasites associated with the file to operate invisibly in the background. * May record your credit cards, bank passwords and other personal information. * Parasites operate on your PC while malicious file is present on the system.
Trojan.FakePowav has been seen to perform the following behavior:

* Adds a Registry Key (RUN) to auto start Programs on system start up
* Reads your outlook address book
* This process creates other processes on disk
* This Process is a file infector which modifies program files to include a copy of the infection
* Looks at the contents of the autoexec.bat file
* Includes file creation code which could be used to test for interception by security products
* Opens browser pop ups
* Found on infected systems and resists interrogation by security products
* Created as a process on disk
* Executed as a Process
* Added as a Registry auto start to load Program on Boot up
* Terminated as a Process
* Deleted as a process from disk

We recommend running a scan of the infected computer in order to detect any additional spyware threats. One should make use of a legitimate antispyware tool, to ensure this PC threat, Trojan.FakePowav, is totally eradicated from the infected system.

Download Spyware Removal Tool to Remove* Trojan.FakePowav
  • Quick & tested solution for Trojan.FakePowav removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Trojan.FakePowav

Files associated with Trojan.FakePowav infection:

Abaddon.exe
ntdll64.dll
s_5849_OTl8fHx8OTl8fHwxMjQzNDc4NDcxfA_.dbx
Power-Antivirus-2009.exe
lsascs.exe
Rapid Antivirus.exe

Trojan.FakePowav DLL's to remove:

ntdll64.dll

Trojan.FakePowav processes to kill:

Power-Antivirus-2009.exe
Abaddon.exe
Power-Antivirus-2009.exe
lsascs.exe
Rapid Antivirus.exe

Remove Trojan.FakePowav registry entries:

HKEY_CURRENT_USERSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN Power-Antivirus-2009
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Power-Antivirus-2009
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ System Protector
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSOCK2\PARAMETERS\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catal
RUNNING PROGRAMPower-Antivirus-2009.exe
RUNNING PROGRAMRapid Antivirus.exe
RUNNING PROGRAMs_5849_OTl8fHx8OTl8fHwxMjQzNDc4NDcxfA_.dbx
RUNNING PROGRAM\Power-Antivirus-2009.exe
RUNNING PROGRAM\Rapid Antivirus.exe
RUNNING PROGRAM\s_5849_OTl8fHx8OTl8fHwxMjQzNDc4NDcxfA_.dbx
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.