desot.exe is a component of Windows Antivirus Pro
This is a harmful program.
 |
It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum. |
Name: desot
Filename: desot.exe
Registry key:
HKEY_CLASSES_ROOT\exefile\shell\open\command
Command: D:\WINDOWS\system32\desot.exe
Startup Type: File associations
Combofix/RSIT Line:
.exe – open – D:\WINDOWS\system32\desot.exe “%1” %*
Description: component of Windows Antivirus Pro (rogue antivirus program)
How to remove: use these Windows Antivirus Pro removal instructions.
August 21st, 2009 at 1:50 pm
After deleting desot.exe from system32,I can not use any exe files.
August 23rd, 2009 at 8:54 pm
Allen, follow these instructions (go to step 2): http://www.myantispyware.com/2009/07/27/how-to-remove-windows-antivirus-pro-uninstall-instructions/
August 24th, 2009 at 1:28 pm
I succefully renamed malwarebytes to com instead of exe which allowed it to install and run.
August 26th, 2009 at 6:50 pm
Call Dell on Call, they we’re able to remove the virus and restore my files.
August 27th, 2009 at 1:11 pm
how do you rename an exe file to a com file?
August 28th, 2009 at 10:52 am
Yes – how do you rename a exe file to a com file.
August 28th, 2009 at 8:12 pm
Rename file before saving (in the the Save dialog).
August 29th, 2009 at 6:14 pm
I deleted the Desot.exe file and now I can’t run any .exe files. I can’t even run add/remove programs because it gives me a rundll32.exe error. how do I fix this problem?
August 29th, 2009 at 10:30 pm
Natalie, use step 2 from the article http://www.myantispyware.com/2009/07/27/how-to-remove-windows-antivirus-pro-uninstall-instructions/
September 9th, 2009 at 4:43 pm
admin i tried what you suggested but was denied due to administrator privileges. What else can I try?
September 14th, 2009 at 3:35 pm
There is a new variant out that will not let you open any .com or .exe files at all…. If you delete desot.exe then when you go to open a program it asks which program you want to use. Old Timer wont run combofix wont run mbam wont run even if you rename them or change them to commands, regedit will not open. Running trinity on it now then might try ubcd remote reg editor. Online scans do nothing appears to be a rootkit probably a tdss variant.
September 27th, 2009 at 12:33 pm
Did all the steps mentioned, with downloading OTM ect from an above link. Having problems when I restart, still now allowed to access programs instantly, asking which programs to use. Various other errors, and can’t install Anti_Malware items suggested. Close it seems. What else can be done?
October 1st, 2009 at 2:46 pm
Renaming it from .exe to .scr worked for me
October 5th, 2009 at 2:10 pm
I know how to get rid of it because I just did. You have to change the registry file because it is telling every program with .exe to run desot.exe. If you go to safe mode comand prompt and type in regedit. Then keep hitting the plus sign for HKEY_CLASSES_ROOT, then exefile, then shell, then open then command. Name on the right column will be ab (default) Type is REG_SZ, then if data has anything added befor \
October 5th, 2009 at 2:12 pm
added befor “%1″%* like C:\windows etc. you have a virus. Find someone with a computer with XP on it that works, do the same thing for regedit and then go to file, export and export the good command file. Then copy to your computer, go to safe mode , drill down and this time do a file import, find the good file, click on it and it should fix it .. Good luck
November 6th, 2009 at 11:25 am
1) Download exefix_xp.com (don’t open it yet)
2) go to windows system32 folder & delete desot.exe
3) Run exefix_xp.com
4) Run Avir or a good anti vir
5) Run Malwarebytes
Worked for me!