desktop.exe spyware making me nuts

With these really stubborn ones you need to attack it from safemode. That way the application is not started. As for the files, if you need to take ownership of them and then delete them.

You can run your tools from there as well. I would also suggest that you download Ad-Aware from www.lavasoft.com. Use all 3 of these tools from safe mode and then go clean out the registry keys.

Good luck

The first answer is correct. Safe mode is needed. After you remove the offending reg. keys, and files, blow away c:\win\prefetch, c:\temp, and c:\docs and settings\%user profile%\local settings\app data\temp,
run MS antispyware, SpybotS&D, etc.
if it comes back up, there is another program 'watching' this program. Then you will need to track for it as well.

Stubborn spywares can be a real pain in the rear to remove. I recommend a cocktail of tools that might be able to do the job, in additon to what it's been said above.

Try the following:

1-) Download and instal and run microsoft antisyware beta.
This tool has an added bonus of being able to protect you from reocuring infections and also fights pontential new ones:

http://www.microsoft.com/athome/security/spyware/software/default.mspx

2-) download and intall run the yahoo syware pop up blocker:

http://toolbar.yahoo.com/?.cpdl=iy

3-) donwload this zone alarm firewall
http://www.zonelabs.com/
to further protect your pc. Pay special attention on the wizard that will walk you through it the configuration.

4-) Make sure you also have the XP SP2 installed that will also help you a great deal

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/winxpsp2.mspx

IF all that faills consider reformating your hard drive and starting a new with the above defenses in place.

Hope this help keep me posted.

Cesar
MCSE, MCP, A+, Webmaster

Desktop.exe is a process which belongs to the Backdoor.SdBot.md Trojan and the FFIsearch Spyware. The Sdbot Trojan is installed on your computer without your knowledge and will spread via network shares, and allows attackers to remote control your computer. The FFIsearch Spyware on the other hand (stored in the %systemroot%\isrvs\ directory) is installed on your computer and will monitor your browsing habits and send information back to it's servers.
You might want to try wintask 5.....
http://www.5starshare.com/WinTasks_5_Professional-soft20389.html

For indepth info on this WORM goto
http://www.sophos.com/virusinfo/analyses/search-results/?virus_search=1&terms=Desktop.exe

Here you will find desktop.exe description and it's variants and a detailed answer on how to remove it.
Hpe it helps
Keep us posted
:-)

Use a combo of these babies from my personal list.

As of 4/23/05

To completely avoid spyware and viruses, turn PC off. Truthfully.
If you really want to use it, prevention with running programs are best. Read their docs on how to use them and update them. All these are FREE.
Oh, yes! KEEP WINDOWS UP TO DATE! Use the AUTOMATIC UPDATE feature.

ONLINE VIRUS CHECKS, no software install required other than an Active X component if required (some do removals):
Symantec Security Check
http://security.symantec.com/sscv6/home.asp?langid=ie&venid=sym&plfid=23&pkj=QQWRORVWHFHMFNZMBBX
BitDefender
http://www.bitdefender.com/scan/licence.php
Panda ActiveScan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
Trend Micro Online Virus Scan
http://housecall.antivirus.com/housecall/start_corp.asp
Trend Micro Housecall
http://housecall.trendmicro.com/
Virus Threat Center Blog
http://virusthreatcenter.com/?tag=zd.ft.fs.vtc
McAfee Virus Removal Tools
http://us.mcafee.com/virusInfo/default.asp?id=vrt

ONLINE SPYWARE CHECKS
ZoneAlarm Spyware Check
http://download.zonelabs.com/bin/promotions/spywaredetector/index3.html

REFERANCE
http://www.download.com/spyware-center/2001-2023-0.html?tag=note

ANTIVIRUS SOFTWARE (again all FREE)
Free avast! 4 Home Edition
http://www.asw.cz/eng/avast_4_home.html
AVG FREE
http://free.grisoft.com/freeweb.php
AntiVir? PersonalEdition Classic
http://www.free-av.com/index.htm
BitDefender Free Edition v7
http://www.bitdefender.com/bd/site/products.php?p_id=24