Win32/Qhost [Threat Name] go to Threat
Win32/Qhost.NQT [Threat Variant Name]
Category | trojan |
Size | 90112 B |
Aliases | Trojan.Win32.VkHost.it (Kaspersky) |
Trojan.Hosts.259 (Dr.Web) | |
PWS-Banker.gen.ec (McAfee) |
Short description
Win32/Qhost.NQT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.
Installation
The trojan does not create any copies of itself.
Other information
Win32/Qhost.NQT is a trojan that prevents access to certain web sites and reroutes traffic to certain IP addresses.
The trojan modifies the following file:
- %system%\drivers\etc\hosts
The trojan writes the following entries to the file:
- # Copyright (c) 1985-2009 Microsoft Corp.
- # This file was created by AutoDesk AntiSpam System
- # Warning! Do not edit this file! It may be way to crash system!
- 85.17.170.85 vkontakte.ru
- 85.17.170.85 www.vkontakte.ru
- 85.17.170.85 vkontakte.com
- 85.17.170.85 www.vkontakte.com
- 85.17.170.85 vk.com
- 85.17.170.85 www.vk.com