Home Malware Programs Backdoors Application.QueryMon

Application.QueryMon

Posted: August 29, 2011

Application.QueryMon is a malicious backdoor Trojan that uses rootkit techniques to open a back door for remote attackers to get access to an infected computer system. Application.QueryMon can install its malicious files and damage your PC system. Application.QueryMon opens a back door on a random TCP port, which enables the attacker to control your computer activity, access system configurations, steal personal information and delete system files. Application.QueryMon is a serious security threat that needs to be eliminated immediately.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Application.QueryMon may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner*

* See Free Trial offer below. EULA and Privacy/Cookie Policy.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%AppData%\Mcxaxm.exe File name: %AppData%\Mcxaxm.exe
File type: Executable File
Mime Type: unknown/exe
%AppData%\1.tmp File name: %AppData%\1.tmp
File type: Temporary File
Mime Type: unknown/tmp
%AppData%\2.exe File name: %AppData%\2.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Mcxaxm = "%AppData%\Mcxaxm.exe"
Loading...