Win32/Qhost [Threat Name] go to Threat

Win32/Qhost.NSN [Threat Variant Name]

Category trojan
Size 3072 B
Detection created Feb 20, 2010
Detection database version 4882
Aliases Trojan.Win32.Qhost.mqt (Kaspersky)
  Trojan.Horse (Symantec)
  Mal/Generic-L (Sophos)
Short description

Win32/Qhost.NSN is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.

Installation

The trojan does not create any copies of itself.

Other information

Win32/Qhost.NSN is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.


The trojan modifies the following file:

  • %system%\­drivers\­etc\­hosts

The trojan writes the following entries to the file:

  • 85.13.206.114 haksjdi262fsf.com
  • 85.13.206.114 uuu20091124.info
  • 85.13.206.114 u07012010u.com

Please enable Javascript to ensure correct displaying of this content and refresh this page.