Downloader.MisleadApp Description

Downloader.MisleadApp is a Trojan that downloads malicious programs onto compromised computers. Downloader.MisleadApp usually spreads through suspicious e-mail attachments or links and may slow down the performance of your computer. Once executed, Downloader.MisleadApp will install random files onto the computer, which will later trigger a number of pop-up notifications warning that the system is infected with parasites. The warnings will also advice a user to purchase a rogue anti-spyware program such as Antivirus System Pro. To completely and safely remove Downloader.MisleadApp from your computer, you will need to use a legitimate anti-spyware program.

Type: Trojans

Aliases: Trojan-Downloader.Win32.Onestage (Ikarus), Mal/FakeAV-Y (Sophos), Win-Trojan/Onestage.126976 (AhnLab).

How Can You Detect Downloader.MisleadApp?

Downloader.MisleadApp has typically the following processes in memory:

• %CommonAppData%\AV1\AV1Two.exe
• %CommonAppData%\AV1\AV1i.exe

Downloader.MisleadApp creates the following registry entries:

• [HKEY_CURRENT_USER\Software\AV1\AV1\{D44A0CDC-E708-40fe-AE1C-7DBB00BB9237}]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

Important Article Disclaimer