ScorpionSaver

ScorpionSaver is a browser extension designed to deliver search-based hijacking/injection and contextual advertising. By modifying the user's home and search page, the program aims to monetize a user's search activities. It achieves this by installing a Browser Helper Object (BHO) in Internet Explorer (IECore.dll), a plugin in Firefox, and a browser extension in Chrome. This allows the extension to monitor and track a user's web browsing activities and display various banner and link-context ads in addition to its search redirection. The software also installs a Windows Service called the 'Level Quality Watcher' which runs automatically each time the computer reboots. The service, 'levelqualitywatcher.exe', is responsible for the initial installation of the web browser plugins and integration. In Chrome, the extension periodically connects to http://www.ScorpionSaver.com/update/chrome to receive updates and notifications. It also requests permissions (without notice to the end user) to integrate with Chrome's tabs, history, notifications, and background services and runs with the description "Download now, save instantly!".