Home / malware

PDF

Trojan:Win32/Hostblock.X

First posted on 12 April 2014.
Source: Microsoft

Aliases :

There are no other names known for Trojan:Win32/Hostblock.X.

Explanation :

Threat behavior Trojan:Win32/Hostblock.X is a malicious program that is unable to spread of its own accord. It may perform a number of actions of an attacker's choice on an affected computer.

Installation

Trojan:Win32/Hostblock.X creates the following files on your PC:

• %programfiles%\valve\platform\config\hosts.exe
• %programfiles%\valve\platform\config\masterservers.vdf
• %programfiles%\valve\platform\config\serverbrowser.vdf

Payload

Changes Hosts file
Trojan:Win32/Hostblock.X changes the Windows Hosts file. Malware sometimes does this to redirect URLs to different IP addresses, often to stop you from accessing security-related websites.
This malware description was produced and published using automated analysis of file SHA1 d8561b2ececd8daac6c6da7083d83a90f14669f0.Symptoms

System changes

The following could indicate that you have this threat on your PC:

• You have these files:
  %programfiles%\valve\platform\config\hosts.exe
  %programfiles%\valve\platform\config\masterservers.vdf
  %programfiles%\valve\platform\config\serverbrowser.vdf

Last update 12 April 2014

 

TOP