Httpswork.com

Httpswork.com Description

Httpswork.com is a fake security website that should never be trusted. Httpswork.com was specifically created to advertise and distribute the rogue security application called Desktop Security 2010. Users should avoid browsing Httpswork.com and users should never purchase the useless Desktop Security 2010 application.

Technical Information

File System Details

Httpswork.com creates the following file(s):
# File Name Detection Count
1 %UserProfile%\Local Settings\Temp\kgn.exe N/A
2 %Program Files%\Desktop Security 2010\hjengine.dll N/A
3 %Program Files%\Desktop Security 2010\msvcp71.dll N/A
4 %Program Files%\Desktop Security 2010\securitycenter.exe N/A
5 %WINDOWS%\system32\[random].exe N/A
6 %UserProfile%\Local Settings\Temp\jkfuckjs.exe N/A
7 %Program Files%\Desktop Security 2010\Desktop Security 2010.exe N/A
8 %Program Files%\Desktop Security 2010\MFC71ENU.DLL N/A
9 %Program Files%\Desktop Security 2010\pthreadVC2.dll N/A
10 %Program Files%\Desktop Security 2010\uninstall.exe N/A
11 %UserProfile%\Local Settings\Temp\gedx_ae09.exe N/A
12 %UserProfile%\Local Settings\Temp\kn.a.exe N/A
13 %Program Files%\Desktop Security 2010\mfc71.dll N/A
14 %Program Files%\Desktop Security 2010\msvcr71.dll N/A
15 %Program Files%\Desktop Security 2010\taskmgr.dll N/A
16 %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Activate Desktop Security 2010.lnk N/A
17 %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\How to Activate Desktop Security 2010.lnk N/A
18 %Program Files%\Desktop Security 2010 N/A
19 %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010.lnk N/A
20 %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Help Desktop Security 2010.lnk N/A
21 %UserProfile%\Local Settings\Temp\kilslmd.exex N/A
22 %Program Files%\Desktop Security 2010\guide.chm N/A
23 %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010 N/A
24 %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Desktop Security 2010.lnk N/A
25 %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Desktop Security 2010.lnk N/A
26 %Program Files%\Desktop Security 2010\daily.cvd N/A

Registry Details

Httpswork.com creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%Program Files%\Desktop Security 2010\Desktop Security 2010.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurityCenter"