Home Malware Programs Trojans Trojan.Win32.Buzus.cqad

Trojan.Win32.Buzus.cqad

Posted: April 13, 2011

Trojan.Win32.Buzus.cqad is a computer trojan that is created to promote spyware program. Trojan.Win32.Buzus.cqad tries to get as much money as it can from infected computer users. Trojan.Win32.Buzus.cqad will automatically execute corrupt .exe and .dll files at every system start-up. Trojan.Win32.Buzus.cqad corrupts PCs via adult porn and shareware websites and through spam email advertisements. Trojan.Win32.Buzus.cqad blocks the running of other applications to scare victims into believing that their computer systems are poisoned with malware threats.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %CommonDesktopDir%\ExChain.lnk
    2 %CommonPrograms%\ExChain\Uninstall ExChain.lnk
    3 %ProgramFiles%\ExChain\Exchain.exe
    4 %ProgramFiles%\ExChain\unins000.dat
    5 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2EAD0C1-2397-4F51-8098-65EA420E7B5E}_is1]
    6 DisplayName = "ExChain 1.12"
    7 HelpLink = "http://www.funradar.com/"
    8 Inno Setup: App Path = "%ProgramFiles%\ExChain"
    9 Inno Setup: Deselected Tasks = ""
    10 Inno Setup: Icon Group = "ExChain"
    11 Inno Setup: Selected Tasks = "desktopicon"
    12 Inno Setup: Setup Version = "5.3.5 (a)"
    13 Inno Setup: User = "%UserName%"
    14 InstallLocation = "%ProgramFiles%\ExChain\"
    15 Publisher = "Fun Radar, Inc." URLInfoAbout = "http://www.funradar.com/"
    16 QuietUninstallString = ""%ProgramFiles%\ExChain\unins000.exe" /SILENT"
    17 UninstallString = ""%ProgramFiles%\ExChain\unins000.exe""
    18 URLUpdateInfo = "http://www.funradar.com/"
Loading...