If the Qdcomsvc.exe program is running on your computer, then you are infected with an ad clicking Trojan. This Trojan will constantly connect to remote sites and render them in the background. Any sites that are visited, though, will not be displayed to the user, and in most cases, the user will not even know the connections are being made. These sites are most likely being visited to generate advertisement revenue for the Trojan developer.
When running, Qdcomsvc.exe will exhibit the following symptoms:
- When attempting to launch security programs, you will receive an error stating that the The Requested Resource is in Use and the program will not be allowed to start.
- Your computer will act sluggish and slow.
- Qdcomsvc.exe process will be shown in Task Manager.
- Your Internet speed will become slow.
- Your computer’s CPU utilization will increase due to the constant connections to remote sites.
- Your hard drive will be constantly utilized.
As this Trojan is protected by the SmartService rootkit, when you try to terminate it you will receive an error that states it is Unable to Terminate Process and that Access is denied.
How was the Qdcomsvc.exe Torjan installed on my computer?
Qdcomsvc is bundled with an unwanted program called s5Mark, which is installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
If you are concerned that you are affected by this Trojan, then I strongly suggest that you perform a scan using the guide below to remove it for free.
8
If Zemana did not automatically start then that means the infection blocked it by its name. To resolve this we need to open the C:\Program Files (x86)\Zemana AntiMalware folder and then rename the ZAM.exe executable.
Once the folder is open, click once on the ZAM.exe file to select it, and then click on the F2 button on your keyboard. This will enter rename mode where you can change the name of the file. If the ZAM file appears to be named just ZAM, rename it to iexplore. If it is named ZAM.exe, then rename it to iexplore.exe.
Once the file has been renamed, double-click on the file to execute it. Zemana Anti-Malware should now start.
30
HitmanPro will now begin to scan your computer for infections, adware, and potentially unwanted programs. When it has finished it will display a list of all the items that Hitman has found as shown in the image below. Please note that the items found may be different than what is shown in the image.
You should now click on the Next button to have HitmanPro remove the detected items. When it is done you will be shown a Removal Results screen that shows the status of the various programs that were removed. At this screen you should click on the Next button and then if prompted you should click on the Reboot button. If HitmanPro does not prompt you to reboot, please just click on the Close button.
Once your computer has has restarted or you pressed the Close button, you should now be at your Windows desktop.
Your computer should now be free of the Qdcomsvc.exe Trojan & Ad Clicker program. If your current security solution allowed this program on your computer, you may want to consider purchasing the full-featured version of Zemana AntiMalware to protect against these types of threats in the future.
If you are still having problems with your computer after completing these instructions, then please follow the steps outlined in the topic linked below:
Are Your Protected?
While Zemana AntiMalware, Malwarebytes Anti-Malware & HitmanPro will scan and clean a computer for free, the free versions do not offer real-time protection. If you want to be fully protected at all times then it is recommended that you purchase a premium version.
Zemana AntiMalware
Purchase the full-featured version of Zemana AntiMalware, which includes second opinion malware scanner when other solutions do not work, cloud scanning, and super-fast scan time, to protect yourself against these types of threats in the future!
Malwarebytes Anti-Malware
Purchase the full-featured version of Malwarebytes Anti-Malware, which includes real-time protection, scheduled scanning, and website filtering, to protect yourself against these types of threats in the future!
HitmanPro
Purchase the full-featured version of HitmanPro, which includes discover viruses, trojans, rootkits, spyware and other malware on up-to-date and fully protected computers using cloud protection and behavioral detections, to protect yourself against these types of threats in the future!
Disclaimer: While we do earn a commission from the sale of the above products, rest assured we only recommend them due to their effectiveness.