desot.exe is a component of Windows Antivirus Pro

This is a harmful program.

remove It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

Name: desot
Filename: desot.exe
Registry key:


Command: D:\WINDOWS\system32\desot.exe
Startup Type: File associations
Combofix/RSIT Line:

.exe – open – D:\WINDOWS\system32\desot.exe “%1” %*

Description: component of Windows Antivirus Pro (rogue antivirus program)

How to remove: use these Windows Antivirus Pro removal instructions.

16 Responses to “desot.exe is a component of Windows Antivirus Pro”

  1. Allen Says:

    After deleting desot.exe from system32,I can not use any exe files.

  2. admin Says:

    Allen, follow these instructions (go to step 2):

  3. DanB Says:

    I succefully renamed malwarebytes to com instead of exe which allowed it to install and run.

  4. Alexis Says:

    Call Dell on Call, they we’re able to remove the virus and restore my files.

  5. clark Says:

    how do you rename an exe file to a com file?

  6. Jeff Says:

    Yes – how do you rename a exe file to a com file.

  7. admin Says:

    Rename file before saving (in the the Save dialog).

  8. Natalie Says:

    I deleted the Desot.exe file and now I can’t run any .exe files. I can’t even run add/remove programs because it gives me a rundll32.exe error. how do I fix this problem?

  9. admin Says:

    Natalie, use step 2 from the article

  10. Nik Says:

    admin i tried what you suggested but was denied due to administrator privileges. What else can I try?

  11. Dave Says:

    There is a new variant out that will not let you open any .com or .exe files at all…. If you delete desot.exe then when you go to open a program it asks which program you want to use. Old Timer wont run combofix wont run mbam wont run even if you rename them or change them to commands, regedit will not open. Running trinity on it now then might try ubcd remote reg editor. Online scans do nothing appears to be a rootkit probably a tdss variant.

  12. Rob Says:

    Did all the steps mentioned, with downloading OTM ect from an above link. Having problems when I restart, still now allowed to access programs instantly, asking which programs to use. Various other errors, and can’t install Anti_Malware items suggested. Close it seems. What else can be done?

  13. Dave Says:

    Renaming it from .exe to .scr worked for me

  14. Walt Says:

    I know how to get rid of it because I just did. You have to change the registry file because it is telling every program with .exe to run desot.exe. If you go to safe mode comand prompt and type in regedit. Then keep hitting the plus sign for HKEY_CLASSES_ROOT, then exefile, then shell, then open then command. Name on the right column will be ab (default) Type is REG_SZ, then if data has anything added befor \

  15. Walt Says:

    added befor “%1″%* like C:\windows etc. you have a virus. Find someone with a computer with XP on it that works, do the same thing for regedit and then go to file, export and export the good command file. Then copy to your computer, go to safe mode , drill down and this time do a file import, find the good file, click on it and it should fix it .. Good luck

  16. Joe Says:

    1) Download (don’t open it yet)
    2) go to windows system32 folder & delete desot.exe
    3) Run
    4) Run Avir or a good anti vir
    5) Run Malwarebytes
    Worked for me!

Leave a Reply