Adware.Downware.9508

Technical Information

Modifies file system

Creates the following files

%TEMP%\qs_01d2634a0\<File name>.log
%TEMP%\symccis2.zip
%TEMP%\qs_01d2634a0\7zip_installer_13485.txt
%TEMP%\qs_01d2634a0\yahoo_keepmysettingsx.vi.zip
%TEMP%\qs_01d2634a0\yahoo_hpds_startpage_searchpge.vi.zip
%TEMP%\qs_01d2634a0\yahoo_hpds_defaultsearch.vi.zip
%TEMP%\qs_01d2634a0\savepathdeals.vi.zip
%TEMP%\qs_01d2634a0\convertfilesforfree.vi.zip
%TEMP%\qs_01d2634a0\spyhunter.vi.zip
%TEMP%\qs_01d2634a0\smartweb.vi.zip
%TEMP%\qs_01d2634a0\linkey.vi.zip
%TEMP%\qs_01d2634a0\converterfreeonline.vi.zip
%TEMP%\qs_01d2634a0\yahoo_hpds_startpage.test.vi.zip
%TEMP%\qs_01d2634a0\smartdriverupdater.vi.zip
%TEMP%\qs_01d2634a0\contentexplorer.vi.zip
%TEMP%\qs_01d2634a0\websearches.vi.zip
%TEMP%\qs_01d2634a0\driversupport.vi.zip
%TEMP%\symccis.dll
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\2kg5wgyi\desktop.ini
%TEMP%\ccdaae3.tmp-shm
%TEMP%\ccdaae3.tmp
%LOCALAPPDATA%low\cookie.ini
%APPDATA%\microsoft\windows\ietldcache\low\index.dat
%LOCALAPPDATA%\microsoft\windows\history\low\history.ie5\index.dat
%APPDATA%\microsoft\windows\cookies\low\index.dat
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\desktop.ini
%LOCALAPPDATA%low\cookieman.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\p57dkn5p\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\t7neb9hc\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\index.dat
%LOCALAPPDATA%\microsoft\windows\history\low\history.ie5\desktop.ini
%LOCALAPPDATA%\microsoft\windows\history\low\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\dbttlzbl\desktop.ini
%TEMP%\qs_01d2634a0\speedupmypc_sales_r2_v2.vi.zip
%TEMP%\qs_01d2634a0\mypcbackup.vi.zip
%TEMP%\qs_01d2634a0\blitzmediaplayeroffer.vi.zip
%TEMP%\qs_01d2634a0\weatherbug.vi.zip
%TEMP%\qs_01d2634a0\systemoptimizerpro.vi.zip
%TEMP%\qs_01d2634a0\smartpccleaner.vi.zip
%TEMP%\qs_01d2634a0\fulldiskfighter.vi.zip
%TEMP%\qs_01d2634a0\driverscanner.vi.zip
%TEMP%\qs_01d2634a0\blasteroids.vi.zip
%TEMP%\qs_01d2634a0\registryhelper.vi.zip
%TEMP%\qs_01d2634a0\pcoptimizerpro_offer.vi.zip
%TEMP%\qs_01d2634a0\offerbox.vi.zip
%TEMP%\qs_01d2634a0\rockettab.vi.zip
%TEMP%\qs_01d2634a0\7zip.vi.zip
%TEMP%\qs_01d2634a0\petite_oo_v4.vi.zip
%TEMP%\qs_01d2634a0\config.xml
%TEMP%\qs_01d2634a0\pcspeedup.vi.zip
%TEMP%\qs_01d2634a0\browseignite.vi.zip
%TEMP%\qs_01d2634a0\nortonsecurityscan.vi.zip
%TEMP%\qs_01d2634a0\maxthon.vi.zip
%TEMP%\qs_01d2634a0\resultsbay.vi.zip
%TEMP%\qs_01d2634a0\defaulttab.vi.zip
%TEMP%\qs_01d2634a0\yahoo_hpds_defaultsearch.test.vi.zip
%TEMP%\qs_01d2634a0\nortonantivirus.vi.zip
%TEMP%\qs_01d2634a0\severeweatheralerts.vi.zip
%TEMP%\qs_01d2634a0\arcadeparlor.vi.zip
%TEMP%\qs_01d2634a0\yahoosuite.vi.zip
%TEMP%\qs_01d2634a0\webbar.vi.zip
%TEMP%\qs_01d2634a0\nortoninternetsecurity.vi.zip
%TEMP%\qs_01d2634a0\winferno.vi.zip
%TEMP%\qs_01d2634a0\astroarcade.vi.zip
%TEMP%\qs_01d2634a0\genieo.vi.zip
%TEMP%\qs_01d2634a0\slowpcfighter.vi.zip
%TEMP%\qs_01d2634a0\kaspersky.vi.zip
%TEMP%\qs_01d2634a0\driverfighter.vi.zip
%TEMP%\qs_01d2634a0\uninstallhelper.vi.zip
%TEMP%\ccdaae3.tmp-wal
%TEMP%\ccdac4b.tmp

Sets the 'hidden' attribute to the following files

%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\t7neb9hc\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\p57dkn5p\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\2kg5wgyi\desktop.ini
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\dbttlzbl\desktop.ini
%LOCALAPPDATA%\microsoft\windows\history\low\history.ie5\desktop.ini

Deletes the following files