I dont have Qhost, but!

  • Thread starter Thread starter I AM CONFUSED
  • Start date Start date
I

I AM CONFUSED

I THOUGHT I HAD THE QHOST TROJAN BECAUSE WHEN I WENT TO A
SEARCH ENGINE, IT WOULD NOT WORK BY HAVING A ERROR
MESSAGE POP UP SAYING "Internet Exlporer could not open
the search page." AND THEN IT HAS " The page cannot be
displayed
The page you are looking for is currently unavailable.
The Web site might be experiencing technical
difficulties, or you may need to adjust your browser
settings. " AND THEN IT HAS "Please try the following:
BLAH BLAH BLAH BLAH BLAH" SOMEONE PLEASE TELL ME WHAT IS
WRONG. I DOWNLOADED THE QHOST TOOL FROM SYMANTEC, SHOULD
I DOWNLOAD THE TOOL FROM SOME OTHER SITE, OR JUST
REINSTALL IE!!! help MEEEEEEEE
 
I Am,
You shouldn't really need the tool as your own AV should be able to handle
it ...
Did you check your HOSTS file?
--
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03-040.asp

If your AV did not detect or you simply don't have an AV (bad idea)
Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid
 
-----Original Message-----
I Am,
You shouldn't really need the tool as your own AV should be able to handle
it ...
Did you check your HOSTS file?
--
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03 -040.asp

If your AV did not detect or you simply don't have an AV (bad idea)
Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/t rojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30- 03]
Please post replies to this Newsgroup, email address is invalid
--

I AM CONFUSED said:
I THOUGHT I HAD THE QHOST TROJAN BECAUSE WHEN I WENT TO A
SEARCH ENGINE, IT WOULD NOT WORK BY HAVING A ERROR
MESSAGE POP UP SAYING "Internet Exlporer could not open
the search page." AND THEN IT HAS " The page cannot be
displayed
The page you are looking for is currently unavailable.
The Web site might be experiencing technical
difficulties, or you may need to adjust your browser
settings. " AND THEN IT HAS "Please try the following:
BLAH BLAH BLAH BLAH BLAH" SOMEONE PLEASE TELL ME WHAT IS
WRONG. I DOWNLOADED THE QHOST TOOL FROM SYMANTEC, SHOULD
I DOWNLOAD THE TOOL FROM SOME OTHER SITE, OR JUST
REINSTALL IE!!! help MEEEEEEEE
Click to expand...


.
Click to expand...
I HAVE ALREADY GONE TO THE SYMNATEC SITE AND IT SAID I
DIDNT HAVE IT, AND I HAVE AN ANTIVIRUS SOFTWARE, BUT I
THINK IT IS MESSED UP, DO U KNOW ANY OTHER WAYS TO DETECT
AND GET RID OF QHOSTS?
 
Mike;

I read the post about the "Qhost" and I have the same
problem. I went to the Symantec site and ran the Qhost fix
tool and it did not find a Trojan. I have AVG as my virus
protection. I still cannot use my IE6 Browser.

I did notice when looking at the HOST files (I found two)
that it does mention in there all the places I have
trouble getting to (like Google.com) and to the left of
the www address is a set of numbers. The numbers are all
identical for each www. address.

Is it possible to just delete the host file?

Thanks
 
Jim,
Is it possible to just delete the host file"
Click to expand...
Yes you can ....... if you just use a standard HOSTS file, you can get a
fresh copy
from my site (see below)

If you have entries you need? Rename it to NOHOSTS
[or]
You can download a small file from my HOSTS page to do it for you.
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid
--
 
I Am,
Does a HOSTS file exist in Windows\Help?
Did you use "RenHostsHelp" on my site?
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid
--

I AM CONFUSED said:
-----Original Message-----
I Am,
You shouldn't really need the tool as your own AV should be able to handle
it ...
Did you check your HOSTS file?
--
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03 -040.asp

If your AV did not detect or you simply don't have an AV (bad idea)
Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/t rojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30- 03]
Please post replies to this Newsgroup, email address is invalid
--

I AM CONFUSED said:
I THOUGHT I HAD THE QHOST TROJAN BECAUSE WHEN I WENT TO A
SEARCH ENGINE, IT WOULD NOT WORK BY HAVING A ERROR
MESSAGE POP UP SAYING "Internet Exlporer could not open
the search page." AND THEN IT HAS " The page cannot be
displayed
The page you are looking for is currently unavailable.
The Web site might be experiencing technical
difficulties, or you may need to adjust your browser
settings. " AND THEN IT HAS "Please try the following:
BLAH BLAH BLAH BLAH BLAH" SOMEONE PLEASE TELL ME WHAT IS
WRONG. I DOWNLOADED THE QHOST TOOL FROM SYMANTEC, SHOULD
I DOWNLOAD THE TOOL FROM SOME OTHER SITE, OR JUST
REINSTALL IE!!! help MEEEEEEEE
Click to expand...


.
Click to expand...
I HAVE ALREADY GONE TO THE SYMNATEC SITE AND IT SAID I
DIDNT HAVE IT, AND I HAVE AN ANTIVIRUS SOFTWARE, BUT I
THINK IT IS MESSED UP, DO U KNOW ANY OTHER WAYS TO DETECT
AND GET RID OF QHOSTS?
Click to expand...
 
Back
Top