Multiple Programs – DESKTOP.EXE

There are a number of legitimate programs called desktop.exe including a windows desktop save and restore utility by Jamie O'Connell. More info can be found at http://www.midiox.com/jsoft.htm. Desktop.exe by Mks Software is a command line based virtual desktop switcher. More info can be found at http://www.mkssoftware.com/docs/man1/desktop.1.asp.

Unfortunately, there are also adware programs and viruses using files by this name. Files called desktop.exe, ffisearch.exe, sysupd.dll and mfiltis.dll install with an adware program called the iSearch Desktop Search Toolbar. These files will generally appear in your c:\windows\isrvs\ folder. We'd recommend removing all of these files using WinPatrol. First kill them under Active Tasks then remove them under Startup Programs and IE Helpers.

Desktop.exe also installs with W32/Dansh-A. This backdoor trojan spreads across weakly protected networks and sets itself up to run on system startup. It can allow a remote user to access your computer and it can download and install other malicious programs. We'd recommend removing this file using WinPatrol. Kill it under Active Tasks then remove it in Startup Programs. If using WinPatrol 8.x or later, right click the file and select "Delete file on reboot". We'd also recommend a full system scan with an up to date antivirus program. Additional background information on this virus can be found at http://www.sophos.com/virusinfo/analyses/w32dansha.html.

Because this is such a common name, there may be other programs that are using it.

Safe

Creative Technologies