Win32/Qhost [Threat Name] go to Threat

Win32/Qhost.NQT [Threat Variant Name]

Category trojan
Size 90112 B
Detection created Dec 09, 2009
Detection database version 4673
Aliases Trojan.Win32.VkHost.it (Kaspersky)
  Trojan.Hosts.259 (Dr.Web)
  PWS-Banker.gen.ec (McAfee)
Short description

Win32/Qhost.NQT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.

Installation

The trojan does not create any copies of itself.

Other information

Win32/Qhost.NQT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.


The trojan modifies the following file:

  • %system%\­drivers\­etc\­hosts

The trojan writes the following entries to the file:

  • # Copyright (c) 1985-2009 Microsoft Corp.
  • # This file was created by AutoDesk AntiSpam System
  • # Warning! Do not edit this file! It may be way to crash system!
  • 85.17.170.85 vkontakte.ru
  • 85.17.170.85 www.vkontakte.ru
  • 85.17.170.85 vkontakte.com
  • 85.17.170.85 www.vkontakte.com
  • 85.17.170.85 vk.com
  • 85.17.170.85 www.vk.com

Please enable Javascript to ensure correct displaying of this content and refresh this page.