Home Malware Programs Adware Qidion

Qidion

Posted: March 28, 2006

It is an adware spyware designed to serve undesirable commercial advertisements to user desktop using a web browser or installed ad-supported software. It also may have additional functionality specific to some variants of browser hijackers and malware applications. Qidion strives to hide from the user and make its detection difficult.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 777.bmp
    2 go_search.bmp
    3 logo2.bmp
    4 nav2.bmp
    5 qi32.dll
    6 usagold.bmp
    7 viagra.bmp

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\qidionHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}qidionqidion
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}3789cbf0-c4ca-4e98-b93b-22acf0587fba

Related Posts

Loading...