desktoplayer.exe
Many our friends tell us they antivirus program report desktoplayer.exe virus infect these days. Following is the description of the desktoplayer.exe file. Note this is for the samples we received, not for all desktoplayer.exe file. The desktoplayer.exe sample submitted on 2010-07-29 and identified as a threat.
Desktoplayer.exe Alias:
Threat File:desktoplayer.exe
Submit time:2010-07-29
Excute time:6 min 28 sec
Level of Spread:2
Level of Threat:4
type:Win32/Chir
Filesize:46K Bytes
20K Bytes
11K Bytes
Files type
desktoplayer.exe is Windows exe file.
MD5:kWvJIDkgn381M8HTK1Vq54LHOraE4xo0
SHA1..:sf1RQl457SB1uYPcSFe88Mtow03mU28C0nFaytTW
Path:
E:\Documents and Settings\[UserName]\Local Settings\Temp\desktoplayer.exe
Report Countries:
Australia
China
Denmark
Antivirus Program Report:
Clam :Backdoor.Win32.Hupigon.dllg
Panda :Trojan.AgentMB.ICX
Related Viruses:
Need help? Post you problem on Free Malware Remove Help forum
desktoplayer.exe Summary
1.Temporarily Disable System Restore;2.Reboot computer in SafeMode;3.delte desktoplayer.exe virus files and kill desktoplayer.exe file task process(if have);4.Delete/Modify any values added to the registry by desktoplayer.exe ;5.delete IE temp files,restart the computer and run a whole scan with McAfee, Norman. desktoplayer.exe virus files as following:
Desktoplayer.exe appears in C:\Program Files\Microsoft folder. It could not be deleted because a running process was using it. Opened Task Manager to find no applications running, but iexplore.exe process was, even with no browser open. End iexplore.exe process, and Desktoplayer.exe can be deleted even in Normal Mode.
Something else keeps trying to reinstall Desktoplayer.exe in the Microsoft folder even after a MalwareBytes full scan and removal. Keeping MalwareBytes as a startup process will detect this; I just don’t know the source.
Going with what Lesthanzero said. Look for any browser exe running be it safari, cometbird or mozilla what ever browser you use kill the process then you will be able to delete desktoplayer.exe
Even I removed desktoplayer.exe, remove all internet temp files, reboot, the c:\program files\Microsoft\desktoplayer.exe is re-generated again by the source.
could anyone tell what that ’source’ is?
According to your description, I think the verson your computer infected is a little different. Please start your antivirus program in safe mode and run a whole scan. After please check the register start menu to find if there is some strange program. I think the desktoplayer.exe is generated by other program which is start as a service or item.
You can also stop svchost.exe to delete desktoplayer.exe however this will not remove the virus as it embeds itself into any executable, dll or html file on your computer. Once you run any of those files it executes its binary function within the embedded code in these files, therefore recreating the desktoplayer exe. You need to remove each infected file to get rid of it properly. By doing so may render your computer useless though as most services rely heavily on at least dll’s. Therefore, a reload of Windows is probably your best bet. Oh and stay away from any networks as it will attach to any file you physically run which you have access to from your machine.
Eset online scanner will help you locate and remove all infected files. After 24 hours of this virus I had 7761 infected files - mostly because I’m a applications developer and the majority of my files are html based or dll’s.
In my case I copied all the files to an external drive, reloaded Windows. Removed the script from each infected file and put them back on my fresh version of Windows.
Enjoy!
the virus desktoplayer.exe in my case is 107KB.
though, after ending the process of iexplore.exe in task manager>services, and then deleting from c:\program files\microsoft, it still reloads after sometime,
it also multiples with *srv.exe files.
manaully searching *srv.exe,desktoplayer.exe, the files are displayed with black icon, it can be deleted, but not completely cause it reloads, and the process is repeated.
no antivirus is able to identify this virus, and the problem still continues. any solutions?
Have you run a whole scan with antivirus program and delete all the temp files? For further remove instruction we need you log of the computer.