Home / malware

PDF

Trojan:Win32/Qhosts.L

First posted on 04 May 2010.
Source: SecurityHome

Aliases :

Trojan:Win32/Qhosts.L is also known as Win32/Qhost (ESET).

Explanation :

Trojan:Win32/Qhosts.L is a trojan that modifies the computer's HOSTS file.
Top

Trojan:Win32/Qhosts.L is a trojan that modifies the computer's HOSTS file. It may be dropped into the computer by other malware. Trojan:Win32/Qhosts.L modifies the HOSTS file (<system folder>\drivers\etc\hosts) to prevent access to several Microsoft and Adobe Web sites, such as the following: 3dns-2.adobe.com 3dns-3.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.adobe.com activate.wip3.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns.adobe.com adobeereg.com ereg.adobe.com ereg.wip3.adobe.com genuine.microsoft.com mpa.microsoft.com mpa.one.microsoft.com practivate.adobe.com sls.microsoft.com wat.microsoft.com wip3.adobe.com wwis-dubc1-vip60.adobe.com

Analysis by Elda Dimakiling

Last update 04 May 2010

 

TOP