TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_QHOST.TB
Overview

Malware type: Trojan

Aliases: No Alias Found

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Low

Distribution potential:

Low

Description: 

TROJ_QHOST.TB Behavior Diagram

Malware Overview

This Trojan uses social engineering methods to lure users into performing certain actions that may, directly or indirectly, cause malicious routines to be performed. Specifically, it makes use of current events, particularly the H1N1 influenza.

This Trojan arrives as attachment to email messages spammed by another malware or a malicious user. It may also be downloaded unknowingly by a user when visiting malicious Web site(s).

It modifies the system's HOSTS files to redirect users accessing certain Web sites to a possibly malicious Web server. However, the said IP address is currently inaccessible.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 5, 2009 3:09:23 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.