Thursday, 2. October 2003

QHosts-1 aka The "r0x s0x"
69.57.146.14


The purpose of this trojan is to "hijack" browser use. When page requests are made, they are rerouted to specified Domain Name Servers. This allows a remote "administrator" to direct users to the pages of their choosing. For example, if an infected user attempted to navigate to www.google.com, they would be routed to a different site.

¬> Network Associates

This trojan has been reclassified as
Low-Profiled due to media attention at

¬> cbronline

... Comment