Troj/Icaserv-A is a Trojan that displays fake warnings about spyware and adware.
The following registry entry is created to run the Trojan on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
icasServ
<path to Trojan>
Registry entries are also created under:
HKLM\SOFTWARE\Microsoft\icasServ
Troj/Icaserv-A displays messages claiming that the computer is infected with spyware or adware. The exact text of these messages is downloaded from a preconfigured URL. The Trojan will then direct the user to a site advertising anti-spyware software.