Windesktopsecurity.com
Windesktopsecurity.com is a malicious website that encourages users to purchase the rogue software called Desktop Security 2010. Users can get redirected to windesktopsecurity.com when they click on fake online scanners or if they are infected with rogueware in association with the website. Once a user visits windesktopsecurity.com a bogus online system scan will be conducted which will automatically indicate that the system is infected with numerous malware that can only be removed with the "full" version of Desktop Security 2010. Do not trust anything on windesktopsecurity.com and never waste your money on Desktop Security 2010.
File System Details
Windesktopsecurity.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | c:\Program Files\Desktop Security 2010\uninstall.exe | |
| 2. | c:\Program Files\Desktop Security 2010\msvcr71.dll | |
| 3. | c:\Program Files\Desktop Security 2010\mfc71.dll | |
| 4. | %UserProfile%\Local Settings\Temp\kn.a.exe | |
| 5. | %UserProfile%\Local Settings\Temp\jkfuckjs.exe | |
| 6. | c:\Program Files\Desktop Security 2010\taskmgr.dll | |
| 7. | c:\Program Files\Desktop Security 2010\pthreadVC2.dll | |
| 8. | c:\Program Files\Desktop Security 2010\MFC71ENU.DLL | |
| 9. | c:\Program Files\Desktop Security 2010\Desktop Security 2010.exe | |
| 10. | %UserProfile%\Local Settings\Temp\kgn.exe | |
| 11. | c:\WINDOWS\system32\[random characters].exe | |
| 12. | c:\Program Files\Desktop Security 2010\securitycenter.exe | |
| 13. | c:\Program Files\Desktop Security 2010\msvcp71.dll | |
| 14. | c:\Program Files\Desktop Security 2010\hjengine.dll | |
| 15. | %UserProfile%\Local Settings\Temp\kilslmd.exe | |
| 16. | %UserProfile%\Local Settings\Temp\gedx_ae09.exe | |
| 17. | c:\Program Files\Desktop Security 2010 | |
| 18. |
C:\Documents and Settings\ |
|
| 19. |
C:\Documents and Settings\ |
|
| 20. | c:\Program Files\Desktop Security 2010\daily.cvd | |
| 21. |
C:\Documents and Settings\ |
|
| 22. |
C:\Documents and Settings\ |
|
| 23. | c:\Program Files\Desktop Security 2010\guide.chm | |
| 24. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Desktop Security 2010.lnk | |
| 25. |
C:\Documents and Settings\ |
|
| 26. |
C:\Documents and Settings\ |
Registry Details
Windesktopsecurity.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Desktop Security 2010"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "C:\Program Files\Desktop Security 2010\Desktop Security 2010.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random characters]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurityCenter"
