Trufsftav.exe is a spyware program identified on March 1st, 2010 after an infection with a Trojan horse downloader masked as "avi player". The program disguises itself as an antivirus program and triggers internet explorer pop-ups, blocks the opening of new programs such as Windows Defender, antivirus installation, etc. AVG antivirus software does not detect the Trufstav executable as a virus. Trufstav turns off Windows Defender's scan capabilities. The program will generally be found at the Local\AppData subfolder in its own folder with a randomly generated name.