Win32/Qhost [Threat Name] go to Threat
Win32/Qhost.OLT [Threat Variant Name]
Category | trojan |
Size | 69632 B |
Aliases | Trojan-Banker.Win32.Qhost.xs (Kaspersky) |
Trojan:Win32/Comame (Microsoft) | |
PSW.Banker6.EVB (AVG) |
Short description
Win32/Qhost.OLT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.
Installation
The trojan does not create any copies of itself.
Other information
Win32/Qhost.OLT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.
The trojan modifies the following file:
- %system%\drivers\etc\hosts
The trojan writes the following entries to the file:
- 200.98.202.130 www.santander.com.br
- 200.98.202.130 santander.com.br
- 200.98.202.130 santandernet.com.br
- 200.98.202.130 www.santandernet.com.br
- 200.98.202.130 www.itau.com.br
- 200.98.202.130 itau.com.br