Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Support > Does This Sound Like Qhosts Infection?

Reply
Thread Tools

Does This Sound Like Qhosts Infection?

 
 
BroJack
Guest
Posts: n/a
 
      10-08-2003
Symptom: Inability to use Yahoo or Google to search the web
_____
Files show:

Hosts C:\WINDOWS 1KB Sam File 4/23/99

Lmhosts C:\WINDOWS 4KB Sam File 4/23/99

hosts C:\WINDOWS 5KB File 10/1/03

hosts C:\WINDOWS\HELP 5KB File 10/1/03

Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03

Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
13KB HTML Document 10/7/03
______

If this is Qhosts, please help me get rid of it.

Jack


 
Reply With Quote
 
 
 
 
Brian H¹©
Guest
Posts: n/a
 
      10-08-2003
BroJack said:

> Symptom: Inability to use Yahoo or Google to search the web
> _____
> Files show:
>
> Hosts C:\WINDOWS 1KB Sam File 4/23/99


^^^^^^^^^^^^ sample file

>
> Lmhosts C:\WINDOWS 4KB Sam File 4/23/99


^^^^^^^^^^^^ sample file

>
> hosts C:\WINDOWS 5KB File 10/1/03


^^^^^^^^^^^^^ Hosts file

>
> hosts C:\WINDOWS\HELP 5KB File 10/1/03


^^^^^^^^^^^^ Help file

>
> Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03


^^^^^^^^^^^^^^ shortcut to Hosts file

>
> Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
> 13KB HTML Document 10/7/03


^^^^^^^^^^^ Qhosts file (as can be seen it it's name)

> ______
>
> If this is Qhosts, please help me get rid of it.
>
> Jack


Internet Options | Delete Files | Include all offline content.
Will empty your cache.

Install a firewall (Outpost or ZoneAlarm etc)
Install anti-virus.
Don't open e-mail attachments.

Read the other posts on the subject, and edit your Hosts file as per
instructions.



 
Reply With Quote
 
 
 
 
°Mike°
Guest
Posts: n/a
 
      10-08-2003
Yes, it's the QHosts trojan, which is evidenced by the
redirection of the hosts file in the Help folder.

The new beta HijackThis will detect and fix this problem.

HijackThis
http://www.tomcoyote.org/hjt/
The new BETA (apparently stable)
http://www.spywareinfo.com/~merijn/f...hijackthis.zip


On Wed, 08 Oct 2003 00:04:08 GMT, in
<(E-Mail Removed) .com>
BroJack scrawled:

>Symptom: Inability to use Yahoo or Google to search the web
>_____
>Files show:
>
>Hosts C:\WINDOWS 1KB Sam File 4/23/99
>
>Lmhosts C:\WINDOWS 4KB Sam File 4/23/99
>
>hosts C:\WINDOWS 5KB File 10/1/03
>
>hosts C:\WINDOWS\HELP 5KB File 10/1/03
>
>Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03
>
>Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
>13KB HTML Document 10/7/03
>______
>
>If this is Qhosts, please help me get rid of it.
>
>Jack
>


--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
 
Reply With Quote
 
°Mike°
Guest
Posts: n/a
 
      10-08-2003
On Wed, 8 Oct 2003 01:22:54 +0100, in
<yNIgb.7894$(E-Mail Removed)>
Brian H¹© scrawled:

>BroJack said:
>
>> Symptom: Inability to use Yahoo or Google to search the web
>> _____
>> Files show:
>>

<snip>

>> hosts C:\WINDOWS\HELP 5KB File 10/1/03

>
>^^^^^^^^^^^^ Help file


Wrong. Qhosts redirects hosts to a new version in the
Windows\Help folder.

<snip>

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
 
Reply With Quote
 
NewKillerStar
Guest
Posts: n/a
 
      10-08-2003
Why the hell do you reply and dont know what the fck you are talking about?


"°Mike°" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Yes, it's the QHosts trojan, which is evidenced by the
> redirection of the hosts file in the Help folder.
>
> The new beta HijackThis will detect and fix this problem.
>
> HijackThis
> http://www.tomcoyote.org/hjt/
> The new BETA (apparently stable)
> http://www.spywareinfo.com/~merijn/f...hijackthis.zip
>
>
> On Wed, 08 Oct 2003 00:04:08 GMT, in
> <(E-Mail Removed) .com>
> BroJack scrawled:
>
> >Symptom: Inability to use Yahoo or Google to search the web
> >_____
> >Files show:
> >
> >Hosts C:\WINDOWS 1KB Sam File 4/23/99
> >
> >Lmhosts C:\WINDOWS 4KB Sam File 4/23/99
> >
> >hosts C:\WINDOWS 5KB File 10/1/03
> >
> >hosts C:\WINDOWS\HELP 5KB File 10/1/03
> >
> >Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03
> >
> >Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
> >13KB HTML Document 10/7/03
> >______
> >
> >If this is Qhosts, please help me get rid of it.
> >
> >Jack
> >

>
> --
> Basic computer maintenance
> http://uk.geocities.com/personel44/maintenance.html



 
Reply With Quote
 
Boomer
Guest
Posts: n/a
 
      10-08-2003
BroJack wrote:

> Symptom: Inability to use Yahoo or Google to search the web
> _____
> Files show:
>
> Hosts C:\WINDOWS 1KB Sam File 4/23/99
>
> Lmhosts C:\WINDOWS 4KB Sam File 4/23/99
>
> hosts C:\WINDOWS 5KB File 10/1/03
>
> hosts C:\WINDOWS\HELP 5KB File 10/1/03
>
> Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03
>
> Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
> 13KB HTML Document 10/7/03
> ______
>
> If this is Qhosts, please help me get rid of it.
>
> Jack



You'd have to open up your HOST file with note pad and edit.

This should help.

http://www.microsoft.com/security/se...s/ms03-040.asp
 
Reply With Quote
 
Boomer
Guest
Posts: n/a
 
      10-08-2003
BroJack wrote:

> Symptom: Inability to use Yahoo or Google to search the web
> _____
> Files show:
>
> Hosts C:\WINDOWS 1KB Sam File 4/23/99
>
> Lmhosts C:\WINDOWS 4KB Sam File 4/23/99
>
> hosts C:\WINDOWS 5KB File 10/1/03
>
> hosts C:\WINDOWS\HELP 5KB File 10/1/03
>
> Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03
>
> Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
> 13KB HTML Document 10/7/03
> ______
>
> If this is Qhosts, please help me get rid of it.
>
> Jack


Also
http://securityresponse.symantec.com.../trojan.qhosts
..html#technicaldetails
 
Reply With Quote
 
°Mike°
Guest
Posts: n/a
 
      10-08-2003
And just which little troll-ette would you be, then?


On Tue, 7 Oct 2003 20:29:27 -0400, in
<(E-Mail Removed)>
NewKillerStar scrawled:

>Why the hell do you reply and dont know what the fck you are talking about?
>
>
>"°Mike°" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>> Yes, it's the QHosts trojan, which is evidenced by the
>> redirection of the hosts file in the Help folder.
>>
>> The new beta HijackThis will detect and fix this problem.
>>
>> HijackThis
>> http://www.tomcoyote.org/hjt/
>> The new BETA (apparently stable)
>> http://www.spywareinfo.com/~merijn/f...hijackthis.zip
>>
>>
>> On Wed, 08 Oct 2003 00:04:08 GMT, in
>> <(E-Mail Removed) .com>
>> BroJack scrawled:
>>
>> >Symptom: Inability to use Yahoo or Google to search the web
>> >_____
>> >Files show:
>> >
>> >Hosts C:\WINDOWS 1KB Sam File 4/23/99
>> >
>> >Lmhosts C:\WINDOWS 4KB Sam File 4/23/99
>> >
>> >hosts C:\WINDOWS 5KB File 10/1/03
>> >
>> >hosts C:\WINDOWS\HELP 5KB File 10/1/03
>> >
>> >Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03
>> >
>> >Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
>> >13KB HTML Document 10/7/03
>> >______
>> >
>> >If this is Qhosts, please help me get rid of it.
>> >
>> >Jack
>> >

>>
>> --
>> Basic computer maintenance
>> http://uk.geocities.com/personel44/maintenance.html

>


--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
 
Reply With Quote
 
NewKillerStar
Guest
Posts: n/a
 
      10-08-2003
No troll, just someone with a bit of pc knowledge..anyone not as smart as
you think you are a troll?

"°Mike°" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> And just which little troll-ette would you be, then?
>
>
> On Tue, 7 Oct 2003 20:29:27 -0400, in
> <(E-Mail Removed)>
> NewKillerStar scrawled:
>
> >Why the hell do you reply and dont know what the fck you are talking

about?
> >
> >
> >"°Mike°" <(E-Mail Removed)> wrote in message
> >news:(E-Mail Removed)...
> >> Yes, it's the QHosts trojan, which is evidenced by the
> >> redirection of the hosts file in the Help folder.
> >>
> >> The new beta HijackThis will detect and fix this problem.
> >>
> >> HijackThis
> >> http://www.tomcoyote.org/hjt/
> >> The new BETA (apparently stable)
> >> http://www.spywareinfo.com/~merijn/f...hijackthis.zip
> >>
> >>
> >> On Wed, 08 Oct 2003 00:04:08 GMT, in
> >> <(E-Mail Removed) .com>
> >> BroJack scrawled:
> >>
> >> >Symptom: Inability to use Yahoo or Google to search the web
> >> >_____
> >> >Files show:
> >> >
> >> >Hosts C:\WINDOWS 1KB Sam File 4/23/99
> >> >
> >> >Lmhosts C:\WINDOWS 4KB Sam File 4/23/99
> >> >
> >> >hosts C:\WINDOWS 5KB File 10/1/03
> >> >
> >> >hosts C:\WINDOWS\HELP 5KB File 10/1/03
> >> >
> >> >Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03
> >> >
> >> >Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
> >> >13KB HTML Document 10/7/03
> >> >______
> >> >
> >> >If this is Qhosts, please help me get rid of it.
> >> >
> >> >Jack
> >> >
> >>
> >> --
> >> Basic computer maintenance
> >> http://uk.geocities.com/personel44/maintenance.html

> >

>
> --
> Basic computer maintenance
> http://uk.geocities.com/personel44/maintenance.html



 
Reply With Quote
 
°Mike°
Guest
Posts: n/a
 
      10-08-2003
Your reaction was troll-like. If you are not a troll, then please
explain, in detail, your comment, and provide proof that I
"dont know what the fck" I'm talking about. Either that,
or STFU.


On Tue, 7 Oct 2003 21:01:18 -0400, in
<(E-Mail Removed)>
NewKillerStar scrawled:

>No troll, just someone with a bit of pc knowledge..anyone not as smart as
>you think you are a troll?
>
>"°Mike°" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>> And just which little troll-ette would you be, then?
>>
>>
>> On Tue, 7 Oct 2003 20:29:27 -0400, in
>> <(E-Mail Removed)>
>> NewKillerStar scrawled:
>>
>> >Why the hell do you reply and dont know what the fck you are talking

>about?
>> >
>> >
>> >"°Mike°" <(E-Mail Removed)> wrote in message
>> >news:(E-Mail Removed)...
>> >> Yes, it's the QHosts trojan, which is evidenced by the
>> >> redirection of the hosts file in the Help folder.
>> >>
>> >> The new beta HijackThis will detect and fix this problem.
>> >>
>> >> HijackThis
>> >> http://www.tomcoyote.org/hjt/
>> >> The new BETA (apparently stable)
>> >> http://www.spywareinfo.com/~merijn/f...hijackthis.zip
>> >>
>> >>
>> >> On Wed, 08 Oct 2003 00:04:08 GMT, in
>> >> <(E-Mail Removed) .com>
>> >> BroJack scrawled:
>> >>
>> >> >Symptom: Inability to use Yahoo or Google to search the web
>> >> >_____
>> >> >Files show:
>> >> >
>> >> >Hosts C:\WINDOWS 1KB Sam File 4/23/99
>> >> >
>> >> >Lmhosts C:\WINDOWS 4KB Sam File 4/23/99
>> >> >
>> >> >hosts C:\WINDOWS 5KB File 10/1/03
>> >> >
>> >> >hosts C:\WINDOWS\HELP 5KB File 10/1/03
>> >> >
>> >> >Hosts C:\WINDOWS\Recent 1KB Shortcut 10/7/03
>> >> >
>> >> >Qhosts(1) C:\WINDOWS\Temporary Internet File\Content.IE5\4LEB816N
>> >> >13KB HTML Document 10/7/03
>> >> >______
>> >> >
>> >> >If this is Qhosts, please help me get rid of it.
>> >> >
>> >> >Jack
>> >> >
>> >>
>> >> --
>> >> Basic computer maintenance
>> >> http://uk.geocities.com/personel44/maintenance.html
>> >

>>
>> --
>> Basic computer maintenance
>> http://uk.geocities.com/personel44/maintenance.html

>


--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
object-like macro used like function-like macro Patrick Kowalzick C++ 5 03-14-2006 03:30 PM
Does this sound like a hardware problem?? MB_ Computer Support 13 09-15-2005 10:01 PM
Playing a sound like MS does? Dr. Compynei Computer Support 3 02-16-2005 09:38 AM
How does Big Country make their guitars sound like bagpipes? Allen Digital Photography 3 03-01-2004 10:53 PM
QHOSTS Trojan Spread Through Pop-Up Ads Harrison Computer Support 4 10-03-2003 05:48 PM



Advertisments