Home > Threats > Trojan.Win32.Qhost

What is Trojan.Win32.Qhost

Posted on 1 December 2005 under Trojans and viruses

1. What is Trojan.Win32.Qhost?

Trojan.Win32.Qhost modifies Windows host file, thus forbidding user to access well known virus protection websites, because the hosts file is used to map IP addresses to host names.
Hosts file location (XP, 2000, NT systems): %System%\drivers\etc\hosts.
Hosts file location (9X systems): %Windows%\hosts.
Virus database update service cannot be accessed as well, so your anti-virus software is not able to update. Trojan.Win32.Qhost is a risky trojan and should be removed immediately to keep your anti-virus program work properly.

2. How to remove Trojan.Win32.Qhost:

  1. Internet connection might be disabled or Internet browser might be blocked by Trojan.Win32.Qhost, so it won't be possible to download any files to infected computer. In this case please download all files required for Trojan.Win32.Qhost removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove Trojan.Win32.Qhost download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove Trojan.Win32.Qhost.

  5. Restart the computer to complete Trojan.Win32.Qhost removal procedure.

3. Hijackthis entries:

O1 Entries
O1 - Hosts: 102.106.104.21 symantec.comsecurityresponse.symantec.com
O1 - Hosts: 228.250.229.157 www.symantec.comsecurityresponse.symantec.com
O1 - Hosts: 29.187.72.218 pandasoftware.com
O1 - Hosts: 97.5.250.241 www.pandasoftware.com
O1 - Hosts: 138.82.87.6 sophos.com
O1 - Hosts: 35.58.179.154 www.sophos.com
O1 - Hosts: 208.162.154.24 mcafee.com
O1 - Hosts: 233.48.92.170 www.mcafee.com
O1 - Hosts: 105.2.201.81 downloads-us1.kaspersky-labs.com
O1 - Hosts: 7.159.58.53 www.downloads-us1.kaspersky-labs.com
O1 - Hosts: 162.45.209.58 updates1.kaspersky-labs.com
O1 - Hosts: 226.229.1.211 www.updates1.kaspersky-labs.com
O1 - Hosts: 29.197.80.27 updates2.kaspersky-labs.com
O1 - Hosts: 119.132.91.34 www.updates2.kaspersky-labs.com
O1 - Hosts: 78.203.27.132 updates3.kaspersky-labs.com
O1 - Hosts: 213.162.104.65 www.updates3.kaspersky-labs.com
O1 - Hosts: 254.41.187.200 updates4.kaspersky-labs.com
O1 - Hosts: 158.136.56.85 www.updates4.kaspersky-labs.com
O1 - Hosts: 204.40.236.125 updates5.kaspersky-labs.com
O1 - Hosts: 137.36.83.8 www.updates5.kaspersky-labs.com
O1 - Hosts: 167.250.29.254 downloads1.kaspersky-labs.com
O1 - Hosts: 227.135.49.4 www.downloads1.kaspersky-labs.com
O1 - Hosts: 85.50.243.233 downloads2.kaspersky-labs.com
O1 - Hosts: 239.71.197.162 downloads3.kaspersky-labs.com
O1 - Hosts: 240.157.232.165 www.downloads3.kaspersky-labs.com
O1 - Hosts: 98.20.33.206 downloads4.kaspersky-labs.com
O1 - Hosts: 158.168.248.53 www.downloads4.kaspersky-labs.com
O1 - Hosts: 239.91.70.216 downloads5.kaspersky-labs.com
O1 - Hosts: 175.41.61.235 www.downloads5.kaspersky-labs.com
O1 - Hosts: 172.61.168.111 ftp.downloads1.kaspersky-labs.com
O1 - Hosts: 209.101.116.6 www.ftp.downloads1.kaspersky-labs.com
O1 - Hosts: 2.196.112.6 ftp.downloads2.kaspersky-labs.com
O1 - Hosts: 71.199.81.204 www.ftp.downloads2.kaspersky-labs.com
O1 - Hosts: 45.90.249.83 ftp.downloads3.kaspersky-labs.com
O1 - Hosts: 105.91.249.5 www.ftp.downloads3.kaspersky-labs.com
O1 - Hosts: 191.78.84.208 ftp.downloads4.kaspersky-labs.com
O1 - Hosts: 34.83.134.125 www.ftp.downloads4.kaspersky-labs.com
O1 - Hosts: 29.86.196.61 ftp.downloads5.kaspersky-labs.com
O1 - Hosts: 113.134.134.133 www.ftp.downloads5.kaspersky-labs.com
O1 - Hosts: 0.8.67.28 dnl-us3.kaspersky-labs.com
O1 - Hosts: 233.236.123.115 www.dnl-us3.kaspersky-labs.com
O1 - Hosts: 245.96.251.52 dnl-us4.kaspersky-labs.com
O1 - Hosts: 50.35.93.29 www.dnl-us4.kaspersky-labs.com
O1 - Hosts: 221.61.206.15 dnl-us5.kaspersky-labs.com
O1 - Hosts: 133.238.20.98 www.dnl-us5.kaspersky-labs.com
O1 - Hosts: 110.228.207.124 dnl-us6.kaspersky-labs.com
O1 - Hosts: 52.176.254.162 www.dnl-us6.kaspersky-labs.com
O1 - Hosts: 176.123.198.13 dnl-us7.kaspersky-labs.com
O1 - Hosts: 31.245.111.65 www.dnl-us7.kaspersky-labs.com
O1 - Hosts: 129.143.176.154 dnl-us8.kaspersky-labs.com
O1 - Hosts: 64.234.44.40 www.dnl-us8.kaspersky-labs.com
O1 - Hosts: 18.143.60.189 kaspersky.ru
O1 - Hosts: 32.224.239.67 www.kaspersky.ru
O1 - Hosts: 104.79.79.83 msk1.drweb.com
O1 - Hosts: 96.205.230.4 www.msk1.drweb.com
O1 - Hosts: 220.133.129.1 msk2.drweb.com
O1 - Hosts: 49.203.52.223 www.msk2.drweb.com
O1 - Hosts: 155.79.158.173 msk3.drweb.com
O1 - Hosts: 220.151.110.204 www.msk3.drweb.com
O1 - Hosts: 38.172.38.1 msk4.drweb.com
O1 - Hosts: 59.19.32.200 www.msk4.drweb.com
O1 - Hosts: 211.254.206.235 boss.drweb.comdrweb.com
O1 - Hosts: 62.196.69.84 www.boss.drweb.comdrweb.com
O1 - Hosts: 74.143.253.31 liveupdate.symantecliveupdate.com
O1 - Hosts: 103.84.210.244 www.liveupdate.symantecliveupdate.com
O1 - Hosts: 9.9.79.148 viruslist.com
O1 - Hosts: 78.18.44.177 www.viruslist.com
O1 - Hosts: 225.252.21.3 security.symantec.com
O1 - Hosts: 30.109.174.152 www.security.symantec.com
O1 - Hosts: 119.91.211.108 f-secure.com
O1 - Hosts: 22.125.36.57 www.f-secure.com
O1 - Hosts: 195.255.193.144 kaspersky-labs.com
O1 - Hosts: 9.122.82.41 www.kaspersky-labs.com
O1 - Hosts: 148.35.75.120 kaspersky.com
O1 - Hosts: 222.67.110.128 www.kaspersky.com
O1 - Hosts: 11.231.145.236 avp.com
O1 - Hosts: 17.216.161.92 www.avp.com
O1 - Hosts: 27.205.231.253 norman.com
O1 - Hosts: 48.224.138.92 www.norman.com
O1 - Hosts: 15.63.85.124 sandbox.norman.com
O1 - Hosts: 94.36.187.38 www.sandbox.norman.com
O1 - Hosts: 4.7.24.128 networkassociates.com
O1 - Hosts: 212.18.58.225 www.networkassociates.com
O1 - Hosts: 107.213.32.228 ca.com
O1 - Hosts: 91.59.1.187 www.ca.com
O1 - Hosts: 137.188.145.198 mast.mcafee.com
O1 - Hosts: 211.213.127.100 www.mast.mcafee.com
O1 - Hosts: 246.181.66.10 my-etrust.com
O1 - Hosts: 175.58.21.146 www.my-etrust.com
O1 - Hosts: 33.27.64.213 download.mcafee.com
O1 - Hosts: 119.103.154.123 www.download.mcafee.com
O1 - Hosts: 202.46.76.18 dispatch.mcafee.com
O1 - Hosts: 69.125.215.94 www.dispatch.mcafee.com
O1 - Hosts: 135.144.89.240 secure.nai.com
O1 - Hosts: 72.68.12.250 www.secure.nai.com
O1 - Hosts: 64.203.15.98 nai.com
O1 - Hosts: 68.163.105.21 www.nai.com
O1 - Hosts: 179.201.75.158 update.symantec.com
O1 - Hosts: 16.42.149.247 www.update.symantec.com
O1 - Hosts: 240.90.156.159 updates.symantec.com
O1 - Hosts: 23.136.42.236 www.updates.symantec.com