Hqpcscanner.com

Hqpcscanner.com Description

Hqpcscanner.com is a browser hijacker promoting the distribution of the rogue anti-spyware application known as SaveSoldier. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Hqpcscanner.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing and downloading the fake spyware remover SaveSoldier.

Technical Information

File System Details

Hqpcscanner.com creates the following file(s):
# File Name Detection Count
1 %Program Files%\SaveSoldier Software\SaveSoldier\SaveSoldierSvc.exe N/A
2 %Program Files%\SaveSoldier Software\SaveSoldier\SaveSoldier.exe N/A
3 %Program Files%\SaveSoldier Software\SaveSoldier\uninstall.exe N/A
4 %Documents and Settings%\\All Users\Start Menu\Programs\SaveSoldier\1 SaveSoldier.lnk N/A
5 %Program Files%\SaveSoldier Software N/A
6 %Program Files%\SaveSoldier Software\SaveSoldier\license.txt N/A
7 %Documents and Settings%\s\All Users\Start Menu\Programs\SaveSoldier N/A
8 %Documents and Settings%\\All Users\Start Menu\Programs\SaveSoldier\3 Uninstall.lnk N/A
9 %Program Files%\SaveSoldier Software\SaveSoldier\data.bin N/A
10 %Documents and Settings%\All Users\Desktop\SaveSoldier.lnk N/A
11 %Documents and Settings%\\All Users\Start Menu\Programs\SaveSoldier\2 Homepage.lnk N/A
12 %Program Files%\SaveSoldier Software\SaveSoldier N/A

Registry Details

Hqpcscanner.com creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\SaveSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveSoldier
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveSoldierSvc
HKEY_CURRENT_USER\Software\SaveSoldier
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SaveSoldier"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SaveSoldierSvc