病毒名称(中文):
病毒别名:
Trojan.Win32.Qhost.e[AVP]Trojan.Qhost.b[KV]
威胁级别:
★★☆☆☆
病毒类型:
木马程序
病毒长度:
2533
影响系统:
Win9xWinNT
病毒行为:
这是一个修改HOSTS文件的木马病毒。该病毒的主要危害是将改变HOSTS文件中IP地址与网址的映射。Windows系统在接受用户的访问某个网址的请求之前，它会先检查%System%\drivers\etc\hosts文件，假如找到了这个网址的映射IP地址，就会转向这个IP地址。这样就可能导致以下危害：
1.无法访问某些反病毒公司的升级网址，导致无法正常升级反病毒软件的病毒库。
2.将某些常用网址映射到病毒网址，使用户感染新病毒。
3.对某些网站发动DoS（拒绝服务）攻击；
4.增加某些网站的访问量以达到病毒制作者某种营利的目的。
将%System%\drivers\etc\hosts文件替换为以下内容：
#Try2Update1.2bylibere_ton_espri
#www.Try2Kod.Tk
127.0.0.1localhost
127.0.0.1http://downloads4.kaspersky-labs.com
127.0.0.1http://downloads3.kaspersky-labs.com
127.0.0.1http://downloads2.kaspersky-labs.com
127.0.0.1http://downloads1.kaspersky-labs.com
127.0.0.1ftp://downloads4.kaspersky-labs.com
127.0.0.1ftp://downloads3.kaspersky-labs.com
127.0.0.1ftp://downloads2.kaspersky-labs.com
127.0.0.1ftp://downloads1.kaspersky-labs.com
127.0.0.1downloads-us1.kaspersky-labs.com
127.0.0.1rads.mcafee.com
127.0.0.1http://www.secuser.com
127.0.0.1a188.x.akamai.net
127.0.0.1liveupdate.symantecliveupdate.com
127.0.0.1liveupdate.symantec.com
127.0.0.1liveupdate.symantec.d4p.net
127.0.0.1update.symantec.com
127.0.0.1ftp.nai.com
127.0.0.1www.grisoft.cz
127.0.0.1www.grisoft.com
127.0.0.1free.grisoft.cz
127.0.0.1tds.diamondcs.com.au
127.0.0.1ieupdate.gdata.de
127.0.0.1ieupdate6.gdata.de
127.0.0.1ieupdate5.gdata.de
127.0.0.1ieupdate4.gdata.de
127.0.0.1ieupdate3.gdata.de
127.0.0.1ieupdate2.gdata.de
127.0.0.1ieupdate1.gdata.de
127.0.0.1www.iavs.cz
127.0.0.1download7.avast.com
127.0.0.1download6.avast.com
127.0.0.1download5.avast.com
127.0.0.1download4.avast.com
127.0.0.1download3.avast.com
127.0.0.1download2.avast.com
127.0.0.1download1.avast.com
127.0.0.1upgrade.bitdefender.com
127.0.0.1windowsupdate.microsoft.com
127.0.0.1www.lavasoftusa.com
127.0.0.1www.a-2.org
127.0.0.1updates.a-2.org
127.0.0.1niuone.norman.no
127.0.0.1www.diamondcs.com.au
127.0.0.1www.attechnical.com
127.0.0.1www.zeylstra.nl
127.0.0.1fractus.mat.uson.mx
127.0.0.1www.toonbox.de
127.0.0.1radius.turvamies.com
127.0.0.1diamondcs.fileburst.com
127.0.0.1downloads.My-eTrust.com
127.0.0.1acs.pandasoftware.com
127.0.0.1v4.windowsupdate.microsoft.com
127.0.0.1v5.windowsupdate.microsoft.com
127.0.0.1www.NoAdware.net
127.0.0.1www.nod32.com
127.0.0.1www.eset.sk
127.0.0.1avu.zonelabs.com
127.0.0.1retail.sp.f-secure.com
127.0.0.1retail01.sp.f-secure.com
127.0.0.1retail02.sp.f-secure.com
127.0.0.1www.moosoft.com
127.0.0.1secuser.model-fx.com
127.0.0.1secuser.com
127.0.0.1downloads-eu1.kaspersky-labs.com
127.0.0.1downloads2.kaspersky-labs.com
127.0.0.1downloads4.kaspersky-labs.com
127.0.0.1downloads1.kaspersky-labs.com
127.0.0.1pccreg.antivirus.com
127.0.0.1dl1.antivir.de
127.0.0.1dl2.antivir.de
127.0.0.1dl3.antivir.de
127.0.0.1dl4.antivir.de
193.125.23.12updates.sald.com
127.0.0.1secuser.model-fx.com
127.0.0.1secuser.com
127.0.0.1www.secuser.com
127.0.0.1www.k-otik.com
127.0.0.1www.megasecurity.org
127.0.0.1www.symantec.com
127.0.0.1housecall.trendmicro.com
127.0.0.1www.trendmicro.com
127.0.0.1fr.mcafee.com
127.0.0.1mcafee.com
127.0.0.1antivirus.cai.com
127.0.0.1www.pandasoftware.com
127.0.0.1www.sophos.com
127.0.0.1www.securitoo.com
127.0.0.1www.Kaspersky-FR.com
127.0.0.1www.Kaspersky.com
127.0.0.1my-etrust.com
127.0.0.1www.avgfrance.com
127.0.0.1www.antivirus-online.de
127.0.0.1www.gietl.com/test-clamav/
127.0.0.1ftp.esafe.com
127.0.0.1ftp.microworldsystems.com
127.0.0.1ftp.europe.f-secure.com
127.0.0.1ftp.ca.co
127.0.0.1ftp.symantec.com
127.0.0.1files.trendmicro-europe.com
127.0.0.1akamai.net
127.0.0.1www.f-secure.com
127.0.0.1www.inline-software.de
127.0.0.1www.norman.com
127.0.0.1www.ravantivirus.com
127.0.0.1www.f-prot.com
127.0.0.1www.drsolomon.com
127.0.0.1www.avast.com
127.0.0.1www.vsantivirus.com
127.0.0.1www.openantivirus.org
127.0.0.1www.bitdefender.com
127.0.0.1www.pandasoftware.es
127.0.0.1www3.ca.com
127.0.0.1us.mcafee.com
127.0.0.1security.symantec.com
127.0.0.1www.dialognauka.ru
127.0.0.1www.viguard.com
127.0.0.1www.free-av.com
127.0.0.1www.nod32.lu
127.0.0.1www.zonelabs.fr
127.0.0.1www.anti-virus-software-review.com
127.0.0.1symantec.com
127.0.0.1www.vet.com.au
127.0.0.1www.eicar.org
127.0.0.1www.avp.ch
127.0.0.1anti-virus.com
127.0.0.1download.mcafee.com
127.0.0.1www.bitdefender.fr
127.0.0.1securityresponse.symantec.com
127.0.0.1microsoft.fr
127.0.0.1microsoft.com
127.0.0.1www.trendmicro.fr
127.0.0.1fr.bitdefender.com
127.0.0.1www.sophos.fr
127.0.0.1www.emsisoft.net/fr
127.0.0.1www.nsclean.com
127.0.0.1www.antiviraldp.com
127.0.0.1www.pestpatrol.com
127.0.0.1www.agnitum.com
127.0.0.1www.simplysup.com
127.0.0.1www.misec.net
127.0.0.1www.my-etrust.com
127.0.0.1www.nod32.nl/_en
127.0.0.1www.centralcommand.com
127.0.0.1www1.my-etrust.com
127.0.0.1www.authentium.com
127.0.0.1www.bitdefender.secyber.net/BITDEFENDER/index.html
127.0.0.1www.finjan.com
127.0.0.1www.fmsinc.com/free/utilities/fmsavs10.htm
127.0.0.1www.psnw.com
127.0.0.1www.gwava.nl
127.0.0.1www.gecadsoftware.com
127.0.0.1www.nai.com
127.0.0.1www.ikarus-software.at/portal/index.php
127.0.0.1www.pspl.com
127.0.0.1www.safetynet.com
127.0.0.1www.stiller.com
127.0.0.1www.sybari.com
127.0.0.1www.viruslist.com
127.0.0.1www.wildlist.com
127.0.0.1www.mcaffee.com/anti-virus/virusmap.asp
127.0.0.1www.mcaffee.com
127.0.0.1www.blackice.iss.net
127.0.0.1www.ccsoftware.ca/8signs
127.0.0.1www.deerfield.com
127.0.0.1www.kerio.com
127.0.0.1www.looknstop.com
127.0.0.1www.mcafee-at-home.com
127.0.0.1www.sygate.com
127.0.0.1www.tinysoftware.com
127.0.0.1www.visualizesoftware.com
127.0.0.1www.kerio.com
127.0.0.1www.zonelabs.com
127.0.0.1www.zonelog.co.uk
127.0.0.1www.safer-networking.org
127.0.0.1www.webroot.com
127.0.0.1www.lavasoft.nu
127.0.0.1www.spywareguide.com
127.0.0.1www.aluriasoftware.com
127.0.0.1www.pestpatrol.com
127.0.0.1www.spyblocker-software.com
127.0.0.1www.spycop.com
127.0.0.1www.spywareguide.com
127.0.0.1www.javacoolsoftware.com
127.0.0.1www.wilderssecurity.net
127.0.0.1www.trapware.com
127.0.0.1www.winpatrol.com
127.0.0.1www.liutilities.com
127.0.0.1www.x-cleaner.com
127.0.0.1avp.com
127.0.0.1ca.com
127.0.0.1shop.symantec.com
127.0.0.1dispatch.mcafee.com/us
127.0.0.1f-secure.com
127.0.0.1kaspersky.com
127.0.0.1mast.mcafee.com
127.0.0.1nai.com/us/index.asp
127.0.0.1networkassociates.com
127.0.0.1secure.nai.com/us/index.asp
127.0.0.1sophos.com
127.0.0.1www.kaspersky.co.uk
127.0.0.1kaspersky.co.uk
127.0.0.1www.housecall.com
127.0.0.1housecall.com
