Rogue software details: Desktop Security 2010

Desktop Security 2010 is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\ProgramFiles\Desktop Security 2010\Desktop Security 2010.exe
c:\ProgramFiles\Desktop Security 2010\securityCenter.exe

Folders
c:\ProgramFiles\Desktop Security 2010
c:\StartMenu\Programs\Desktop Security 2010

Registry entries
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\Desktop Security 2010
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\
CurrentVersion\Winlogon
Value: Shell
Data: C:\Program Files\Desktop Security 2010\Desktop Security 2010.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Internet Settings\User Agent\Post Platform
Value: Desktop Security 2010
Data: Desktop Security 2010
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run
Value: Desktop Security 2010
Data: C:\Program Files\Desktop Security 2010\Desktop Security 2010.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run
Value: r8wuogvrwvwe
Data: C:\WINDOWS\system32\r8wuogvrwvwe.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run
Value: SecurityCenter
Data: C:\Program Files\Desktop Security 2010\securitycenter.exe

Source: Lavasoft Malware Lab’s Rogue Gallery.




Share this