Alemod is a trojan that infects the wininet.dll file, which is an essential component of the Windows operating system. The parasite also tracks user Internet activity and changes desktop settings. Once executed, Alemod displays a fake message asking the user to check the system for spyware. After the user clicks on that message, the trojan installs itself to the system and runs a payload. It starts monitoring user Internet activity, modifies various desktop settings and changes the current wallpaper to an image with the deceptive text. This can be a fake error message, bogus security alert, etc. Alemod also downloads from the Internet and executes malicious files. The trojan runs on every Windows startup.