Threat Database Rogue Websites Desktopsecuritylab.com

Desktopsecuritylab.com

Desktopsecuritylab.com is a malicious website that encourages users to purchase the rogue software called Desktop Security 2010. Users can get redirected to Desktopsecuritylab.com when they click on fake online scanners or if they are infected with rogueware in association with the website. Once a user visits Desktopsecuritylab.com a bogus online system scan will be conducted which will automatically indicate that the system is infected with numerous malware that can only be removed with the "full" version of Desktop Security 2010. Do not trust anything on Desktopsecuritylab.com and never waste your money on Desktop Security 2010.

File System Details

Desktopsecuritylab.com may create the following file(s):
# File Name Detections
1. %UserProfile%\Local Settings\Temp\kgn.exe
2. c:\Program Files\Desktop Security 2010\Desktop Security 2010.exe
3. c:\Program Files\Desktop Security 2010\MFC71ENU.DLL
4. c:\Program Files\Desktop Security 2010\pthreadVC2.dll
5. c:\Program Files\Desktop Security 2010\uninstall.exe
6. %UserProfile%\Local Settings\Temp\jkfuckjs.exe
7. %UserProfile%\Local Settings\Temp\kn.a.exe
8. c:\Program Files\Desktop Security 2010\mfc71.dll
9. c:\Program Files\Desktop Security 2010\msvcr71.dll
10. c:\Program Files\Desktop Security 2010\taskmgr.dll
11. %UserProfile%\Local Settings\Temp\gedx_ae09.exe
12. %UserProfile%\Local Settings\Temp\kilslmd.exe
13. c:\Program Files\Desktop Security 2010\hjengine.dll
14. c:\Program Files\Desktop Security 2010\msvcp71.dll
15. c:\Program Files\Desktop Security 2010\securitycenter.exe
16. c:\WINDOWS\system32\[random characters].exe
17. C:\Documents and Settings\\Start Menu\Programs\Desktop Security 2010\Activate Desktop Security 2010.lnk
18. C:\Documents and Settings\\Start Menu\Programs\Desktop Security 2010\How to Activate Desktop Security 2010.lnk
19. c:\Program Files\Desktop Security 2010\daily.cvd
20. C:\Documents and Settings\\Start Menu\Programs\Desktop Security 2010.lnk
21. C:\Documents and Settings\\Start Menu\Programs\Desktop Security 2010\Help Desktop Security 2010.lnk
22. c:\Program Files\Desktop Security 2010
23. C:\Documents and Settings\\Start Menu\Programs\Desktop Security 2010
24. C:\Documents and Settings\\Start Menu\Programs\Desktop Security 2010\Desktop Security 2010.lnk
25. %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Desktop Security 2010.lnk
26. c:\Program Files\Desktop Security 2010\guide.chm

Registry Details

Desktopsecuritylab.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "C:\Program Files\Desktop Security 2010\Desktop Security 2010.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random characters]"
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurityCenter"

Trending

Most Viewed

Loading...