PopWin is a trojan that downloads from the Internet and executes arbitrary, potentially malicious files. It also changes the Internet Explorer default home page and terminates running antiviruses and security-related programs. The parasite injects malicious code into legitimate processes in attempt to hide its presence in the system. PopWin runs as a service on every Windows startup.