Qualitink

Qualitink Description

ScreenshotQualitink is an adware that may show annoying pop-up advertisements, coupons, offers, deals and sponsored links via a pop-up box on well-known online shopping websites that are visited by PC users. Pop-up advertisements delivered by Qualitink may be shown as boxes, which involve numerous coupons that are available or as underlined keywords, which, when clicked, will deliver pop-up advertisements that claim to come to an affected PC user by Qualitink. Qualitink is an add-on for Internet Explorer, Mozilla Firefox and Google Chrome that is usually embedded when the web user installs other free software products, such as video recording/streaming, download managers or PDF creators, that might had packaged into their installation Qualitink. When the web user installs these free software products, he may also install Qualitink. When installed on the computer, whenever the PC user will visit popular online shopping or social networking websites, Qualitink may illustrate a 'See Similar' button on product images, which, when clicked, may show pop-up advertisements by Qualitink. Qualitink may also show advertising banners on the websites visited by PC users, and as they browse the web, Qualitink may display coupons and other deals available on various websites.

Infected with Qualitink? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Qualitink

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Qualitink outbreaks and other threats from global to local level.

File System Details

Qualitink creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\qualitink\update\avg20yq5.vzw.exe 65,312 d5f917372dc6d15d135c69d685fb461f 75
2 qualitink.exe 800,608 c129e48114f6796fd1c3e26313ce2a8c 71
3 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ljkcijnbckdflhifmbnfnkjacokloacf 66
4 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\ljkcijnbckdflhifmbnfnkjacokloacf 65
5 %ProgramFiles%\qualitink 64
6 %ProgramFiles(x86)%\qualitink 63
7 %PROGRAMFILES(x86)%\qualitink\bin\utilqualitink.exe 66,336 7e564523ddf127f27c7aae88feb079e4 5,031
8 %PROGRAMFILES%\qualitink\qualitinkbho.dll 249,632 079809a061d66e4c859285ec75c6dbf7 13
9 %TEMP%\~nsu.tmp\Au_.exe 212,185 07844d783a96493cf1272560da1f6f23 3
10 %ProgramFiles(x86)%\qualitink\LJKCIJNBCKDFLHIFMBNFNKJACOKLOACF.CRX 3,103 817091b66a87247a7c5d516db8c5d7a5 1

Registry Details

Qualitink creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Google\Chrome\Extensions\ljkcijnbckdflhifmbnfnkjacokloacf
SOFTWARE\Wow6432Node\Microsoft\Tracing\updatequalitink_RASAPI32
SOFTWARE\Microsoft\Tracing\updatequalitink_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\updatequalitink_RASMANCS
SOFTWARE\Microsoft\Tracing\updatequalitink_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{73ad5d47-66e5-4127-80ca-c0eedabafbcc}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{73ad5d47-66e5-4127-80ca-c0eedabafbcc}
SYSTEM\ControlSet002\services\Update qualitink
SYSTEM\CurrentControlSet\services\eventlog\Application\Update qualitink
SYSTEM\CurrentControlSet\services\Update qualitink
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{a973aa1b-7a77-4c77-9933-fa6d170c5696}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{a973aa1b-7a77-4c77-9933-fa6d170c5696}
SOFTWARE\Wow6432Node\Google\Chrome\Extensions\oihhcfinabilanafbhpcgobblnegoben
SOFTWARE\Google\Chrome\Extensions\oihhcfinabilanafbhpcgobblnegoben
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{5A5776B9-C752-4AFE-81AF-2ABDD19E05A0}
{73ad5d47-66e5-4127-80ca-c0eedabafbcc}
{94dc4aa7-8299-4d7d-8f4d-48acf05e08ba}
{A6CDD239-81D7-4B92-88A2-96F1C5D6EF95}
{a973aa1b-7a77-4c77-9933-fa6d170c5696}

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 7 + 9 ?