Home > Threats > Trojan.Win32.Qhost

What is Trojan.Win32.Qhost

Posted on 1 December 2005 under Trojans and viruses

1. What is Trojan.Win32.Qhost?

Trojan.Win32.Qhost modifies Windows host file, thus forbidding user to access well known virus protection websites, because the hosts file is used to map IP addresses to host names.
Hosts file location (XP, 2000, NT systems): %System%\drivers\etc\hosts.
Hosts file location (9X systems): %Windows%\hosts.
Virus database update service cannot be accessed as well, so your anti-virus software is not able to update. Trojan.Win32.Qhost is a risky trojan and should be removed immediately to keep your anti-virus program work properly.

2. How to remove Trojan.Win32.Qhost:

  1. Internet connection might be disabled or Internet browser might be blocked by Trojan.Win32.Qhost, so it won't be possible to download any files to infected computer. In this case please download all files required for Trojan.Win32.Qhost removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove Trojan.Win32.Qhost download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove Trojan.Win32.Qhost.

  5. Restart the computer to complete Trojan.Win32.Qhost removal procedure.

3. Hijackthis entries:

O1 Entries
O1 - Hosts: symantec.comsecurityresponse.symantec.com
O1 - Hosts: www.symantec.comsecurityresponse.symantec.com
O1 - Hosts: pandasoftware.com
O1 - Hosts: www.pandasoftware.com
O1 - Hosts: sophos.com
O1 - Hosts: www.sophos.com
O1 - Hosts: mcafee.com
O1 - Hosts: www.mcafee.com
O1 - Hosts: downloads-us1.kaspersky-labs.com
O1 - Hosts: www.downloads-us1.kaspersky-labs.com
O1 - Hosts: updates1.kaspersky-labs.com
O1 - Hosts: www.updates1.kaspersky-labs.com
O1 - Hosts: updates2.kaspersky-labs.com
O1 - Hosts: www.updates2.kaspersky-labs.com
O1 - Hosts: updates3.kaspersky-labs.com
O1 - Hosts: www.updates3.kaspersky-labs.com
O1 - Hosts: updates4.kaspersky-labs.com
O1 - Hosts: www.updates4.kaspersky-labs.com
O1 - Hosts: updates5.kaspersky-labs.com
O1 - Hosts: www.updates5.kaspersky-labs.com
O1 - Hosts: downloads1.kaspersky-labs.com
O1 - Hosts: www.downloads1.kaspersky-labs.com
O1 - Hosts: downloads2.kaspersky-labs.com
O1 - Hosts: downloads3.kaspersky-labs.com
O1 - Hosts: www.downloads3.kaspersky-labs.com
O1 - Hosts: downloads4.kaspersky-labs.com
O1 - Hosts: www.downloads4.kaspersky-labs.com
O1 - Hosts: downloads5.kaspersky-labs.com
O1 - Hosts: www.downloads5.kaspersky-labs.com
O1 - Hosts: ftp.downloads1.kaspersky-labs.com
O1 - Hosts: www.ftp.downloads1.kaspersky-labs.com
O1 - Hosts: ftp.downloads2.kaspersky-labs.com
O1 - Hosts: www.ftp.downloads2.kaspersky-labs.com
O1 - Hosts: ftp.downloads3.kaspersky-labs.com
O1 - Hosts: www.ftp.downloads3.kaspersky-labs.com
O1 - Hosts: ftp.downloads4.kaspersky-labs.com
O1 - Hosts: www.ftp.downloads4.kaspersky-labs.com
O1 - Hosts: ftp.downloads5.kaspersky-labs.com
O1 - Hosts: www.ftp.downloads5.kaspersky-labs.com
O1 - Hosts: dnl-us3.kaspersky-labs.com
O1 - Hosts: www.dnl-us3.kaspersky-labs.com
O1 - Hosts: dnl-us4.kaspersky-labs.com
O1 - Hosts: www.dnl-us4.kaspersky-labs.com
O1 - Hosts: dnl-us5.kaspersky-labs.com
O1 - Hosts: www.dnl-us5.kaspersky-labs.com
O1 - Hosts: dnl-us6.kaspersky-labs.com
O1 - Hosts: www.dnl-us6.kaspersky-labs.com
O1 - Hosts: dnl-us7.kaspersky-labs.com
O1 - Hosts: www.dnl-us7.kaspersky-labs.com
O1 - Hosts: dnl-us8.kaspersky-labs.com
O1 - Hosts: www.dnl-us8.kaspersky-labs.com
O1 - Hosts: kaspersky.ru
O1 - Hosts: www.kaspersky.ru
O1 - Hosts: msk1.drweb.com
O1 - Hosts: www.msk1.drweb.com
O1 - Hosts: msk2.drweb.com
O1 - Hosts: www.msk2.drweb.com
O1 - Hosts: msk3.drweb.com
O1 - Hosts: www.msk3.drweb.com
O1 - Hosts: msk4.drweb.com
O1 - Hosts: www.msk4.drweb.com
O1 - Hosts: boss.drweb.comdrweb.com
O1 - Hosts: www.boss.drweb.comdrweb.com
O1 - Hosts: liveupdate.symantecliveupdate.com
O1 - Hosts: www.liveupdate.symantecliveupdate.com
O1 - Hosts: viruslist.com
O1 - Hosts: www.viruslist.com
O1 - Hosts: security.symantec.com
O1 - Hosts: www.security.symantec.com
O1 - Hosts: f-secure.com
O1 - Hosts: www.f-secure.com
O1 - Hosts: kaspersky-labs.com
O1 - Hosts: www.kaspersky-labs.com
O1 - Hosts: kaspersky.com
O1 - Hosts: www.kaspersky.com
O1 - Hosts: avp.com
O1 - Hosts: www.avp.com
O1 - Hosts: norman.com
O1 - Hosts: www.norman.com
O1 - Hosts: sandbox.norman.com
O1 - Hosts: www.sandbox.norman.com
O1 - Hosts: networkassociates.com
O1 - Hosts: www.networkassociates.com
O1 - Hosts: ca.com
O1 - Hosts: www.ca.com
O1 - Hosts: mast.mcafee.com
O1 - Hosts: www.mast.mcafee.com
O1 - Hosts: my-etrust.com
O1 - Hosts: www.my-etrust.com
O1 - Hosts: download.mcafee.com
O1 - Hosts: www.download.mcafee.com
O1 - Hosts: dispatch.mcafee.com
O1 - Hosts: www.dispatch.mcafee.com
O1 - Hosts: secure.nai.com
O1 - Hosts: www.secure.nai.com
O1 - Hosts: nai.com
O1 - Hosts: www.nai.com
O1 - Hosts: update.symantec.com
O1 - Hosts: www.update.symantec.com
O1 - Hosts: updates.symantec.com
O1 - Hosts: www.updates.symantec.com