Q-host Virus

B

budpytko

Registered
I got hit with this Trojan on my computer at work on March 3rd. It shut down my ability to access the major virus detection software web sites including Symantic (Norton) AntiVirus! Today, I finally detected it by running Computer Associates EZ Antivirus from it's web site (pcpitstop.com), then having to purchase it! (That sucked!) I've written (email) Symantic and complained that even tho I downloaded and installed their latest definitions, it still didn't detect the poblem. I'll let you all know their response.

Until then, beware if you use Norton AntiVirus. it doesn't catch them all!


Bud Pytko
'97 LSC Silver Frost
'92 F250 Banks TurboDiesel Bimini Blue
'92 Prowler 5th Wheel
http://myfilelocker.comcast.net/charlespytko/Lincoln/BudPytko97LSC.JPG
 
RE: Q-host Virus

What files are affected by this virus? I ould like to make sure this is not on my machines.

Alexander
Board of Directors
Lincolns of Distinction
 
RE: Q-host Virus

From a google search of "Qhost virus"



Qhost

First Report: 2004-06-09 12:09
Last Update: 2004-10-01 05:54

Aliases: AntiAV.Hosts.Trojan
AvBlocker.Hosts.Trojan
HOSTS
Qhost
QHosts.Trojan
Trojan.Win32.Qhost
Win32.Agobot
Win32.Agobot.RZ
Win32.Hostblock
Win32/Agobot.RZ.Hosts.Trojan
Win32/AntiAV.Hosts



Information From AntiVirus Vendors

Below you find information from different vendors, which have been included in this Secunia Virus Profile.

Information from the vendors is sorted by the time the information became publicly available at the vendor websites. The first available reports will be displayed first. Please note timestamps are in GMT+1.





#1 - F-SECURE

Qhost Severity:
- File Size:
-

Reported:
2004-06-09 12:09 Last Update:
2004-10-01 05:53

Description:
Several malicious programs, for example Agobot backdoor, modify Windows HOSTS file to block access to websites and update servers of several anti-virus companies. As a result, websites of anti-virus vendors become inaccessible and anti-virus programs can stop getting updates.

http://www.f-secure.com/v-descs/qhost.shtml
 
RE: Q-host Virus

First response from Symatec was a form letter (email). Teels me to access their web site - DUH!! Gee, didn't I say I couldn't??? I replied to that dumb thing....stay tuned. Oh, I see they have now added a very simular virus to their virus dectection updates today! Exactly the same symptoms. Is that closing the barn door after etc etc etc.

Bud Pytko
'97 LSC Silver Frost
'92 F250 Banks TurboDiesel Bimini Blue
'92 Prowler 5th Wheel
http://myfilelocker.comcast.net/charlespytko/Lincoln/BudPytko97LSC.JPG
 
You must log in or register to reply here.
Back
Top