Home Malware Programs Browser Hijackers ScanQuery

ScanQuery

Posted: May 11, 2011

ScanQuery is a computer virus and malicious browser hijacker that is a small file that invades your computer system through secret means and constantly reroutes your web browser to the ScanQuery.com website. The main aim of ScanQuery is to redirect you to advertisements. When ScanQuery infects your computer, it controls your information and potentially uses it for malicious purposes. Once ScanQuery is installed onto the computer, it will launch automatically when Windows starts. ScanQuery will create fake report on the Windows registry, system memory and hard drive in order to intimidate the targeted user.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 [%PROGRAM_FILES%]\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}
    2 [%PROGRAM_FILES%]\ScanQuery

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerMainSearch BarHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainSearch Bar
Loading...