Comments on: Desktop Security 2010

By: affan

affan — Mon, 16 Aug 2010 06:45:09 +0000

hey guyz..!!!
ive jus bought a new laptop n this stinkin thing got into it.Ive been tryin alot to remove this but em feeling helpless now…..
can any 1 help????????????

By: thao nguen

thao nguen — Fri, 30 Jul 2010 14:24:20 +0000

thank you nhieu lam.

By: Jon

Jon — Mon, 19 Jul 2010 04:34:55 +0000

Yep this is a pretty nasty one. There is actually a text file in the folder called enemies-names.txt which lists a lot of very nefarious things that are possible. Very scary stuff. If you are not worried about losing data and can reformat the hard drive, that is probably the surest method of removal. Otherwise, find someone who knows DOS… The instructions posted above for manual removal are very good and were instrumental in helping me figure this out. Everything said about the possibility of making it worse if you’re unsure about regedit, etc. is correct. That being said, I would add the following:
use F8, boot into safe mode, sign on as Administrator and go to a DOS prompt. Use CD\ to go to the root directory. Use dir /as /ah /s security*.exe to search for the securitycenter.exe file. This was the file I found that I believe to be the culprit on this particular computer. It was in the “c:\documents and settings\%user%\Application Data\Desktop Security 2010″ folder. Also in the Application Data folder there will probably be another folder with the same or very similar date stamp that has a very long name of random characters. The one I saw was like 19957AEF23B5D6…. 32 characters long. It has very similar files as the Desktop Security 2010 folder. Delete the files in both of these folders. For files in these folders that won’t delete, at the DOS prompt, use attrib -a -r -h securitycenter.exe or whatever the filename is that won’t delete to change the file attributes. Then try to delete the file again, del .
Now with those folders empty, you’re still in safe mode, delete everything in the temp folder of that user – c:\documents and settings\%user%\Local Settings\Temp\*.* The Word8.0 folder may not delete, that’s OK.
Remove the shortcuts from the user desktop, quick launch area and program folder and startup group.
You can check the registry at this point for entries listed above, but you also need to do it again as the user, not as the administrator. Reboot, sign on as the user who had the problem, go through the registry entry check.
I have to attribute the basis for these steps to George V. from 3/26/2010. Thanks George, where ever you are…

By: Modano

Modano — Mon, 19 Jul 2010 01:07:14 +0000

This worked for me:

1) Download and run Rkill. (This will stop the virus from working)

2) Download Spyware Doctor and perform a quick scan. It will find it. If you only have the trial version of SpyDoc you can’t make the program repair it, so delete manually every single file and registry (using regedit), that belongs to SecurityDesktop according to the scan.

3) Now, it should look like it’s gone. But if you let it be, it will show up again after you restart your computer. So you need to run msconfig and in the Startup tab uncheck everyting that should not be there. In my case it was some file called “m” and the second one something like “jcf” – I don’t remember but it was 3 letters. In your case those might be called differently. (If you’re not sure which files are they, google every single one and check if they’re used by any normal software or system.)

4) Delete the content of your Temp files. “Windows/Temp” and “C/Document and Settings/User/Local Settings/Temp”. You can safely remove everything that your system allows you.

5) Restart your computer and see if you were succesful.

By: Jon

Jon — Sun, 18 Jul 2010 03:26:47 +0000

@jenny
There is a way to remove it manually. I beleive a system restore does a drive partiton format and you loose anything that was not on the computer when you bought it, (that you haven’t backed up)… A backed up hard drive that is infected is better than loosing your hard drive altogether. I’m fixing a PC tomorrow, 7/18, and will post my notes. If you have all the info and really know what you are doing it still takes about 20-30 minutes. And as previously stated you can really mess up your PC if you do the incorrect thing. Since each PC infection is somewhat unique a ‘step-by-step’ is hard. But I’ll post what I do tomorrow. First thing is to try to copy any data files (word docs, excel, PDF’s, music files, pictures, etc. Copy these to a big flash drive, 16GB ($40), or to something like a WD passport, 500GB($90), or 1TB ($120).

By: Brittany Cain

Brittany Cain — Thu, 15 Jul 2010 02:13:29 +0000

I just did a system restore and it fixed it

By: jenny

jenny — Sun, 13 Jun 2010 02:56:39 +0000

i dont get any of this stuff i would like toknow step~by~step of how 2 remove this annoying stuff i’ve had for about 1/2 a year now nd i feel like throwing my computer could anyone help me please

By: Naz

Naz — Mon, 26 Apr 2010 07:19:14 +0000

I have got this virus, I have downloaded Norton 2010 updated the definations ran the scan, it quaritines some but leaving some of the trojan on pending. Although this has stoped the annoying pop ups, and the virus found sounds, I am still unable to uninstall the program, it was also stoping me from uninstalling other programs. Wat can i do to uninstall this?