1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

i think i have the qhost trojan?

Discussion in 'Virus & Other Malware Removal' started by epson, Oct 3, 2003.

Thread Status:
Not open for further replies.
  1. epson

    epson Thread Starter

    Joined:
    Jul 18, 2003
    Messages:
    86
    Hello everyone hope someone can help me here.
    I have been having a problem with my main pc getting online and i am not sure if it is my network card or this qhost trojan.
    Anyways i am running win xp and was unable to get online with my main pc but i can get online using my laptop both on a network via a hub. When i phoned my internet provider they were very rude and said it was not there problem because the modem must be working if i can get online with my laptop. But they did tell me to doucle click on my computer then double click on my c-drive and if there was a folder named bdtmp that this was the qhost virus. Well it was there so i just deleted the folder i did run my virus scan with pc-cillin and nothing came up. So could anyone tell me is this maybe just my network card?
    Thanks sorry this is so long.
    I will run hijackthis once i get that computer online again.
     
  2. Metallica

    Metallica Malware Specialist

    Joined:
    Jan 28, 2003
    Messages:
    692
    Hi epson,

    Find the file C: \Windows\help\hosts (no extension)
    and delete it.
    Click Start, and then click Run. (The Run dialog box appears.)
    Type regedit
    Then click OK. (The Registry Editor opens.)

    Navigate to the key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VxD\MSTCP

    In the right pane, delete the values:
    "EnableDNS"="1"
    "NameServer"="<IP address specified in the batch file>"
    "HostName"="host"
    "Domain"="mydomain.com"

    Navigate to the key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

    In the right pane, delete the values:

    "ProxyEnable"="0"
    "MigrateProxy"="0"

    Copied from: http://www.symantec.com/avcenter/venc/data/trojan.qhosts.html

    If this hijack is the reason for the computer not getting online that should fix it.

    Regards,

    Pieter
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/169220

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice