Home Malware Programs Adware Qidion Toolbar

Qidion Toolbar

Posted: March 28, 2006

It is a search toolbar application which has been customised and stealth-installed by many different sites. Qidion installs itself as an Internet Explorer toolbar and displays pop-up advertisements. Qidion may be installed via ActiveX from the qidion.com website. It may also be installed as a component of another program such as Adware.Istbar.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 777.bmp
    2 go_search.bmp
    3 logo2.bmp
    4 qi32.dll
    5 usagold.bmp
    6 viagra.bmp

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\qidionHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}qidionqidion
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}3789cbf0-c4ca-4e98-b93b-22acf0587fba

Related Posts

Loading...