Httpswork.com
El Httpswork.com es un falso sitio web de seguridad en el que no se debe confiar. El Httpswork.com fue creado específicamente para promover y distribuir la falsa aplicación de seguridad llamada Desktop Security 2010. El usuario debe evitar navegar por el Httpswork.com y comprar la inútil aplicación Desktop Security 2010.
Detalles del Sistema de Archivos
Httpswork.com puede crear los siguientes archivos:
| # | Nombre |
Detecciones
Detecciones: la cantidad de casos confirmados y sospechosos de una amenaza particular detectada en computadoras infectadas según lo informado por SpyHunter.
|
|---|---|---|
| 1. | %UserProfile%\Local Settings\Temp\kgn.exe | |
| 2. | %Program Files%\Desktop Security 2010\hjengine.dll | |
| 3. | %Program Files%\Desktop Security 2010\msvcp71.dll | |
| 4. | %Program Files%\Desktop Security 2010\securitycenter.exe | |
| 5. | %WINDOWS%\system32\[random].exe | |
| 6. | %UserProfile%\Local Settings\Temp\jkfuckjs.exe | |
| 7. | %Program Files%\Desktop Security 2010\Desktop Security 2010.exe | |
| 8. | %Program Files%\Desktop Security 2010\MFC71ENU.DLL | |
| 9. | %Program Files%\Desktop Security 2010\pthreadVC2.dll | |
| 10. | %Program Files%\Desktop Security 2010\uninstall.exe | |
| 11. | %UserProfile%\Local Settings\Temp\gedx_ae09.exe | |
| 12. | %UserProfile%\Local Settings\Temp\kn.a.exe | |
| 13. | %Program Files%\Desktop Security 2010\mfc71.dll | |
| 14. | %Program Files%\Desktop Security 2010\msvcr71.dll | |
| 15. | %Program Files%\Desktop Security 2010\taskmgr.dll | |
| 16. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Activate Desktop Security 2010.lnk | |
| 17. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\How to Activate Desktop Security 2010.lnk | |
| 18. | %Program Files%\Desktop Security 2010 | |
| 19. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010.lnk | |
| 20. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Help Desktop Security 2010.lnk | |
| 21. | %UserProfile%\Local Settings\Temp\kilslmd.exex | |
| 22. | %Program Files%\Desktop Security 2010\guide.chm | |
| 23. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010 | |
| 24. | %Documents and Settings%\All Users\Start Menu\Programs\Desktop Security 2010\Desktop Security 2010.lnk | |
| 25. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Desktop Security 2010.lnk | |
| 26. | %Program Files%\Desktop Security 2010\daily.cvd |
Detalles del Registro
Httpswork.com puede crear la siguiente entrada o entradas de registro:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%Program Files%\Desktop Security 2010\Desktop Security 2010.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "Desktop Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurityCenter"
