Win32/Xadupi
Windows Defender detects and removes this threat.
This threat is a trojan that poses as a useful application, usually called WinZipper or QKSee, but can silently download and install other malware.
This trojan is often installed silently by BrowserModifier:Win32/Sasquor or BrowserModifier:Win32/SupTab. It is often installed under the name "WinZipper", "QKSee", or both.
This threat is part of a suite of malware and unwanted software families that is also called "Fireball". Read about this threat group in the Windows Security blog:
PUA:Win32/Xadupi
This application was stopped from running on your network because it has a poor reputation. This application can affect the quality of your computing experience. We have seen this leading to the following potentially unwanted behaviors on PCs:
- Changes browser shortcuts
These applications are most commonly software bundlers or installers for applications such as toolbars, adware, or system optimizers. We have observed this application installing software that you might not have intended on your PC.
If you were trying to install an application, you might have downloaded it from a source other than the official product's website.
We usually see this application installed on PCs in the following countries. This list is sorted according to prevalence:
- United States
- France
- Russia
- Brazil
- Italy
This detection is part of our extended Potentially Unwanted Application protection feature.
Trojan:Win32/Xadupi
Windows Defender detects and removes this threat.
This threat is a trojan that poses as a useful application, usually called WinZipper or QKSee, but can silently download and install other malware.
This trojan is often installed silently by BrowserModifier:Win32/Sasquor or BrowserModifier:Win32/SupTab. It is often installed under the name "WinZipper", "QKSee", or both.
This threat is part of a suite of malware and unwanted software families that is also called "Fireball". Read about this threat group in the Windows Security blog: