Thread: NEW Virus
View Single Post
Old 02-10-2003, 19:27   #1
Mark W
 
Join Date: Jun 2003
Location: Swansea
Age: 47
Posts: 620
Mark W is on a distinguished roadMark W is on a distinguished road
Angry NEW Virus

just so you guys know, tech support are getting a fair few of these -

Symantec have dubbed this virus Trojan.Qhosts aka QHosts-1 [McAfee], VBS.QHOSTS [CA]

This virus effects various parts of the machine .

However the main concern for us is that it changes the DNS settings to apparently non working DNS servers = no browsing.

The quickest way to spot this virus is to check the DNS settings.

For 2k / XP

Click Start -> Run
type CMD
In the new window type ipconfig
look at the DNS servers entry.
This should say

DNS Servers . . . . . . . . : 194.168.4.100
194.168.8.100

However if the Trojan.Qhost virus is there this entry will start with either 69.57.XXX.XXX or 216.127.XXX.XXX
Mark W is offline   Reply With Quote