Adware.ZQuest

Updated: February 13, 2007 11:46:11 AM

Type: Adware

Publisher: AtiX

Risk Impact: High

File Names: slinstaller.exe TopContext.exe lofqf.exe (detected as Adware.180Searchassistant) Nail.exe (de

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

When Adware.ZQuest is executed, it performs the following actions:

Attempts to contact [http://]static.topconverting.com/[REMOVED] and download a number of component files.
Downloads multiple adwares including:
Creates the file %Windir%\TopContext.exe.

Note: %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.
Adds the value:

"Windows More Choice" = "%Windir%\TopContext.exe"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the risk runs when Windows starts.
Creates the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{22131A58-5F9A-3EAA-28A7-C3059A3D0632}

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}