Hqpcscanner.com

Hqpcscanner.com is a browser hijacker promoting the distribution of the rogue anti-spyware application known as SaveSoldier. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Hqpcscanner.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing and downloading the fake spyware remover SaveSoldier.

File System Details

Hqpcscanner.com may create the following file(s):
# File Name Detections
1. %Program Files%\SaveSoldier Software\SaveSoldier\SaveSoldierSvc.exe
2. %Program Files%\SaveSoldier Software\SaveSoldier\SaveSoldier.exe
3. %Program Files%\SaveSoldier Software\SaveSoldier\uninstall.exe
4. %Documents and Settings%\\All Users\Start Menu\Programs\SaveSoldier\1 SaveSoldier.lnk
5. %Program Files%\SaveSoldier Software
6. %Program Files%\SaveSoldier Software\SaveSoldier\license.txt
7. %Documents and Settings%\s\All Users\Start Menu\Programs\SaveSoldier
8. %Documents and Settings%\\All Users\Start Menu\Programs\SaveSoldier\3 Uninstall.lnk
9. %Program Files%\SaveSoldier Software\SaveSoldier\data.bin
10. %Documents and Settings%\All Users\Desktop\SaveSoldier.lnk
11. %Documents and Settings%\\All Users\Start Menu\Programs\SaveSoldier\2 Homepage.lnk
12. %Program Files%\SaveSoldier Software\SaveSoldier

Registry Details

Hqpcscanner.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\SaveSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveSoldier
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveSoldierSvc
HKEY_CURRENT_USER\Software\SaveSoldier
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SaveSoldier"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SaveSoldierSvc

Trending

Most Viewed

Loading...