Httpswork.com
O Httpswork.com é um falso site de segurança, no qual nunca se deve confiar. O Httpswork.com foi criado especificamente para divulgar e distribuir um aplicativo de segurança nocivo, chamado Desktop Security 2010. Os usuários devem evitar navegar pelo Httpswork.com e nunca devem comprar o aplicativo inútil do Desktop Security 2010.
Detalhes Sobre os Arquivos do Sistema
Httpswork.com pode criar o(s) seguinte(s) arquivo(s):
| # | Nome do arquivo |
Detecções
Detecções: O número de casos confirmados e suspeitos de uma determinada ameaça detectada nos computadores infectados conforme relatado pelo SpyHunter.
|
|---|---|---|
| 1. | %UserProfile%\Local Settings\Temp\kgn.exe | |
| 2. | %Program Files%\Desktop Security 2010\hjengine.dll | |
| 3. | %Program Files%\Desktop Security 2010\msvcp71.dll | |
| 4. | %Program Files%\Desktop Security 2010\securitycenter.exe | |
| 5. | %WINDOWS%\system32\[random].exe | |
| 6. | %UserProfile%\Local Settings\Temp\jkfuckjs.exe | |
| 7. | %Program Files%\Desktop Security 2010\Desktop Security 2010.exe | |
| 8. | %Program Files%\Desktop Security 2010\MFC71ENU.DLL | |
| 9. | %Program Files%\Desktop Security 2010\pthreadVC2.dll | |
| 10. | %Program Files%\Desktop Security 2010\uninstall.exe | |
| 11. | %UserProfile%\Local Settings\Temp\gedx_ae09.exe | |
| 12. | %UserProfile%\Local Settings\Temp\kn.a.exe | |
| 13. | %Program Files%\Desktop Security 2010\mfc71.dll | |
| 14. | %Program Files%\Desktop Security 2010\msvcr71.dll | |
| 15. | %Program Files%\Desktop Security 2010\taskmgr.dll | |
| 16. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Activate Desktop Security 2010.lnk | |
| 17. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\How to Activate Desktop Security 2010.lnk | |
| 18. | %Program Files%\Desktop Security 2010 | |
| 19. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010.lnk | |
| 20. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Help Desktop Security 2010.lnk | |
| 21. | %UserProfile%\Local Settings\Temp\kilslmd.exex | |
| 22. | %Program Files%\Desktop Security 2010\guide.chm | |
| 23. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010 | |
| 24. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Desktop Security 2010.lnk | |
| 25. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Desktop Security 2010.lnk | |
| 26. | %Program Files%\Desktop Security 2010\daily.cvd |
Detalhes sobre o Registro
Httpswork.com pode criar a seguinte entrada de registro ou entradas de registro:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%Program Files%\Desktop Security 2010\Desktop Security 2010.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurityCenter"
