We would like to inform you about the latest product in the market of rogues. Its name is Desktop Security 2010. Like all the other badware of this type, Desktop Security 2010 is pushed by Trojan that can be picked up while using online system scanners from different misleading sites and even from some social engineering pages. Such infection is able to worm into your PC when you even do not expect it to, but once inside, the Trojan is going to download and install v onto your computer. While installing Desktop Security 2010, Trojan horse will also drop tons of files under random names in Windows directory. After each scan Desktop Security 2010 is going to detect these files and present them as infections. Though Desktop Security 2010 says they are dangerous, these files are absolutely harmless and were created only to trick users and make them believe their PC is infected and start purchase everything Desktop Security 2010 offers to protect their selves from further infecting. Even if you have purchased the license it will not prevent troubles. One thing that you can face using rogue antispyware applications is countless pop-ups that are going to appear all over your desktop so often that you could barely do anything with your computer. In most cases, these bogus notifications state about license importance, about active threat detection, or an attempt of invasion of your computer. Also, it might be difficult to visit a web page you want to, as Desktop Security 2010 gets over your browser and controls all links you follow to prevent it from being detected and removed. Please remember, Desktop Security 2010 is fake application that only imitates security protection, but has nothing to do with real virus detection and removing.
Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:

How to remove Desktop Security 2010 manually:
It's possible to remove Desktop Security 2010 manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.
The files to be deleted:
%Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010Remove registry entries:
%Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010.lnk
%Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Activate Desktop Security 2010.lnk
%Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Desktop Security 2010.lnk
%Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Help Desktop Security 2010.lnk
%Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\How to Activate Desktop Security 2010.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Desktop Security 2010.lnk
%UserProfile%\Local Settings\Temp\gedx_ae09.exe
%UserProfile%\Local Settings\Temp\jkfuckjs.exe
%UserProfile%\Local Settings\Temp\kgn.exe
%UserProfile%\Local Settings\Temp\kilslmd.exex
%UserProfile%\Local Settings\Temp\kn.a.exe
%Program Files%\Desktop Security 2010
%Program Files%\Desktop Security 2010\daily.cvd
%Program Files%\Desktop Security 2010\Desktop Security 2010.exe
%Program Files%\Desktop Security 2010\guide.chm
%Program Files%\Desktop Security 2010\hjengine.dll
%Program Files%\Desktop Security 2010\mfc71.dll
%Program Files%\Desktop Security 2010\MFC71ENU.DLL
%Program Files%\Desktop Security 2010\msvcp71.dll
%Program Files%\Desktop Security 2010\msvcr71.dll
%Program Files%\Desktop Security 2010\pthreadVC2.dll
%Program Files%\Desktop Security 2010\securitycenter.exe
%Program Files%\Desktop Security 2010\taskmgr.dll
%Program Files%\Desktop Security 2010\uninstall.exe
%WINDOWS%\system32\[random].exe
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Security 2010
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “C:\Program Files\Desktop Security 2010\Desktop Security 2010.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform “Desktop Security 2010″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random]“
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Desktop Security 2010″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SecurityCenter”
No comments:
Post a Comment