Home / malware

PDF

Program:Win32/DSupport

First posted on 24 April 2012.
Source: Microsoft

Aliases :

There are no other names known for Program:Win32/DSupport.

Explanation :

Program:Win32/DSupport is a program that provides support and computer maintenance options. This program may install other software without adequate user consent.


Top

Program:Win32/DSupport is a program that provides support and computer maintenance options. This program may install other software without adequate user consent.



Installation

Win32/DSupport is distributed by computer support companies and other personal computer technicians to assist clients with remote computer support requests. Each distribution is customized with specific company or technician information, including name, logo and contact information. The installation folder is unique to each distribution, however, we observed that the names of the files installed are consistent.

The installer for Win32/DSupport makes the following changes:

• Creates the registry subkey:
  HKLM\Software\dSupport
• Creates the following subfolder:
  %ProgramFiles%\<unique name> (i.e. "%ProgramFiles%\Computer Repair Tech")
• Creates the following files in "%ProgramFiles%\<unique name>":
  AltLang.ini
  appface.dll
  COMDLG32.OCX
  dSupport.exe
  dSupport.ini
  LaVolpeAlphaImg2.ocx
  MSCOMCTL.OCX
  readme.txt
  skin.bind
  supportlogo.bmp
  supportlogo.gif
  supportlogo.jpg
  supportlogo.png
  unins000.dat
  unins000.exe
  
• Creates a program icon on the desktop, and in the Start menu, for each user profile, as in the following example:
  
  

Analysis by Aaron Hulett

Last update 24 April 2012

 

TOP