When Trojan.Wireshark.a is executed, it performs the following activities:
It installs a piece of Scareware dubbed Wireshark Antivirus. Wireshark Antivirus is developed to execute automatically on every restart. It will perform a fake scan on the system and falsely state that your machine is infected. It will also claim that these noted infections will only be removed after you purchase a full version of the software. Wireshark Antivirus will block nearly all legitimate programs, even applications such as notepad and wordpad. Any application attempted to be launched will be misleadingly flagged as infected. It will also display many fake alerts and pop-ups with misleading information.
