Home / malware

PDF

Trojan.Qhost.AKR

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Trojan.Qhost.AKR is also known as Trojan.Win32.Qhost.tk, Win32:Qhost-BXO, Adware.SearchTwo.36.

Explanation :

Trojan.Qhost.AKR comes as a patcher for BitDefender products 2008 (Internet Security 2008, Total Security 2008 and Antivirus Plus 2008) with a user interface and instructions on how to use it. At some point, you are requested to push a button that will modify the %WINDIR%System32Driversetchosts file, adding as entry the Bitdefender antivirus update site pointing to localhost. This will impede the antivirus to update.

Also, the attributes of the %WINDIR%System32Driversetchosts file will be set to hidden, system and readonly, making it more difficult to be seen and changed by an unexperienced user.

Last update 21 November 2011

 

TOP