NEW Virus
 

just so you guys know, tech support are getting a fair few of these -

Symantec have dubbed this virus Trojan.Qhosts aka QHosts-1 [McAfee], VBS.QHOSTS [CA]

This virus effects various parts of the machine .

However the main concern for us is that it changes the DNS settings to apparently non working DNS servers = no browsing.

The quickest way to spot this virus is to check the DNS settings.

For 2k / XP

Click Start -> Run
type CMD
In the new window type ipconfig
look at the DNS servers entry.
This should say

DNS Servers . . . . . . . . : 194.168.4.100
194.168.8.100

However if the Trojan.Qhost virus is there this entry will start with either 69.57.XXX.XXX or 216.127.XXX.XXX

Re: NEW Virus
 

Thanks,

Looks like a lot of repair work if it attacks. And its not in my current virus defs.

Re: NEW Virus
 

Nor mine, just tried Liveupdate and nothing new ?!?!?!?!

Re: NEW Virus
 

My AV supplier www.pandasoftware.co.uk doesnt list that name. They do however show a similar effect virus detected a few days ago

Trojan:HATOY.A

It too changes the DNS settings although the address given is different: 207.44.220.30

Re: NEW Virus
 

lol, some of our tech support guys picked this up yesterday - well before symantech :D

Re: NEW Virus
 

Hope I am up to date got a live update this morning, but can't aford another refit!

Re: NEW Virus
 

Liveupdate doesn't have the definition - appears to be only in the daily instant updates - since there is no patch on Micro$oft to fix the hole, I'm installing the instant update - I'll let you know how i got on

/edit I downloaded the file, ran it & it said it updated the defs - but still no change as far as i can see - going for a reboot. See you in 5 mins

/edit still no joy - don't know what i'm doing wrong :(

/edit I've found the problem - the front page says the intelligent updater file was updated on the 2nd Oct, but when i went to download it only a file from the 1st oct was available :(

Re: NEW Virus
 

Caugh Mcafee caugh ;)

Re: NEW Virus
 

:D Yup.... mcafee had it listed a couple of days ago....
Oh and is that a Salford *cough* you've got there Defiant? :naughty: Sounds like you need a little antivirus protection yourself :p

Re: NEW Virus
 

This intelligent update file has it in ;)


http://securityresponse.symantec.com...es/US-N95.html

Thats for XP :)

Re: NEW Virus
 

That did the job nicely :)

Re: NEW Virus
 

Just updated my virus definations.