Associated Malware Groups
The filename is associated with the malware groups:
- Fraudulent Security Program
- Malicious Software
File Behavior
SSTQN.DLL has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- The Process is polymorphic and can change its structure
- Registers a Dynamic Link Libray (DLL) File
- This Process uses Anti Dissasembly Tricks to avoid analysis by security products
SSTQN.DLL has been the subject of the following behavior:
- Registered as a Dynamic Link Library File
- Enabled as an In Process Object/Server - Common with DLL Injections
- Created as a process on disk
- The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Created and Registered as a Browser Helper Object in Internet Explorer
- Registered as a Dynamic Link Libray (DLL) File
- Deleted as a process from disk
- Added as a Registry Key (RUNONCE) to auto start Programs on system start up
Country Of Origin
The filename SSTQN.DLL was first seen on Jun 21 2007 in the following geographical regions of the Webroot community:
- The United States on Jun 21 2007
- Netherlands on Oct 1 2007
- Germany on Oct 1 2007
- Canada on Oct 2 2007
- France on Oct 11 2007
- Spain on Oct 11 2007
- Belgium on Oct 11 2007
Filesizes
The following file size has been seen:
- 266,336 bytes
- 311,872 bytes
- 319,072 bytes
- 298,080 bytes
- 277,044 bytes
- 332,896 bytes
- 244,832 bytes
File Type
The filename SSTQN.DLL refers to many versions of a dynamic link library.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.