Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

SHOW DESKTOP.SCF is Trojan StartPage

$
0
0

The file SHOW DESKTOP.SCF is identified as a virus dropper.
The dropper SHOW DESKTOP.SCF is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file SHOW DESKTOP.SCF loads into the computer memory and tries to connect to the dangerous web site.
Usually the SHOW DESKTOP.SCF dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the SHOW DESKTOP.SCF process and delete the file SHOW DESKTOP.SCF.

Malware Analysis of SHOW DESKTOP.SCF
Full path on a computer: %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\SHOW DESKTOP.SCF

Detected by UnHackMe:

SHOW DESKTOP.SCF
Default location: %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\SHOW DESKTOP.SCF

Removal Results: Success
Number of reboot: 1

SHOW DESKTOP.SCF is known as:

Trojan StartPage

How to quickly detect SHOW DESKTOP.SCF presence?
Files:
  • %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\0TURKT2R\DESKTOP.INI
  • %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\LP039OY4\DESKTOP.INI
  • %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\NETWORKSERVICE\START MENU\PROGRAMS\ACCESSORIES\ADDRESS BOOK.LNK
  • %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\NETWORKSERVICE\START MENU\PROGRAMS\WINDOWS MEDIA PLAYER.LNK
  • %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\SHOW DESKTOP.SCF


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>