Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Feb 08, 2012 | Updated Apr 21, 2013


Detected by Microsoft Defender Antivirus

Aliases: Win32/Zonsterarch (other) Win32/Blinerarch (other) Win32/Ninunarch (other) Win32/Tarifarch (other) Win32/Zipparch (other) Win32/Multsarch (other) Win32/Smasarch (other) Win32/Movivarch (other) Win32/Ziconarch (other) Win32/Moxtrarch (other) Win32/Instonarch (other) Win32/Nadostarch (other) Win32/Mobsularch (other)


Win32/Pameseg is a family of installers that require the user to send an SMS message to a premium number to successfully install certain programs, some of which are otherwise be available for free. Currently, most variants target Russian speakers.

For more information on Pameseg, please see the following blog posts:

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see

Follow us