Win32/Qhost [Threat Name] go to Threat

Win32/Qhost.OLT [Threat Variant Name]

Category trojan
Size 69632 B
Aliases Trojan-Banker.Win32.Qhost.xs (Kaspersky)
  Trojan:Win32/Comame (Microsoft)
  PSW.Banker6.EVB (AVG)
Short description

Win32/Qhost.OLT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.

Installation

The trojan does not create any copies of itself.

Other information

Win32/Qhost.OLT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.


The trojan modifies the following file:

  • %system%\­drivers\­etc\­hosts

The trojan writes the following entries to the file:

  • 200.98.202.130    www.santander.com.br
  • 200.98.202.130    santander.com.br
  • 200.98.202.130    santandernet.com.br
  • 200.98.202.130    www.santandernet.com.br
  • 200.98.202.130    www.itau.com.br
  • 200.98.202.130    itau.com.br

Please enable Javascript to ensure correct displaying of this content and refresh this page.