Welcome Guest ( Log In | Register )

Bump Topic Topic Closed RSS Feed

Outline · [ Standard ] · Linear+

Virus/Malware Need help! Virus keep coming back., Qhost Trojan! help!

views
     
Peterdp
post Sep 25 2009, 02:02 PM

Getting Started
**
Junior Member
135 posts

Joined: Sep 2009
according to google,it modify the DNS server settings to point to an external site. This will prevent normal connectivity to the Internet, as domain names cannot be resolved properly.I was attacked by these kind of virus too.I somehow managed to get rid of it by deleting the connection then scan it while in safe mode.After that,i made a new connection.It works rclxms.gif I don't recommend using avg coz it's detection is not really good.Otherwise,try this link,hopefully it helps: http://www.exterminate-it.com/malpedia/remove-qhosts
Peterdp
post Sep 26 2009, 11:42 AM

Getting Started
**
Junior Member
135 posts

Joined: Sep 2009
i guess reformatting is the best way.
Peterdp
post Sep 26 2009, 01:52 PM

Getting Started
**
Junior Member
135 posts

Joined: Sep 2009
Trojan.Win32.Qhost modifies Windows host file, thus forbidding user to access well known virus protection websites, because the hosts file is used to map IP addresses to host names.
Hosts file location (XP, 2000, NT systems): %System%\drivers\etc\hosts.
Hosts file location (9X systems): %Windows%\hosts.
Virus database update service cannot be accessed as well, so your anti-virus software is not able to update. Trojan.Win32.Qhost is a risky trojan and should be removed immediately to keep your anti-virus program work properly.

Can you access to the internet? Try downloading PcTools internet security.It's trial but there's free promotion for a year by pctools.The virus kept coming back because it infected your network.
Peterdp
post Sep 26 2009, 02:17 PM

Getting Started
**
Junior Member
135 posts

Joined: Sep 2009
since you have tried almost everything,i suggest it's time to reformat your hard drive.I have been attacked twice,the first time i have to reformat my hard drive but i managed to get rid of it at the second time.
Peterdp
post Sep 26 2009, 07:00 PM

Getting Started
**
Junior Member
135 posts

Joined: Sep 2009
try open task manager.. is there anything called "Win32/Qhost" in your processes?
Peterdp
post Sep 27 2009, 05:27 PM

Getting Started
**
Junior Member
135 posts

Joined: Sep 2009
do you get redirected to other websites?
Peterdp
post Sep 28 2009, 09:52 PM

Getting Started
**
Junior Member
135 posts

Joined: Sep 2009
what's the problem? Coz i don't understand the pic sweat.gif

Topic ClosedOptions
 

Change to:
| Lo-Fi Version
0.0225sec    0.81    6 queries    GZIP Disabled
Time is now: 14th December 2025 - 08:10 AM