Jump to content


Photo

How to remove trojan -- Qhosts.adp


  • Please log in to reply
3 replies to this topic

#1 ahlai

ahlai

    Member

  • New Member
  • Pip
  • 2 posts

Posted 09 June 2004 - 06:32 AM

hello guyz ,

My Pc have been effected by Qhosts.adp trojan virus, i have try to adware6.0 to scan n remove the trojan virus but no use. Then , i try using stinger to remove the trojan also no use. The trojan virus is located C:\Windows\System32\Drivers\etc\hosts !!!!!


Can anyone reply my messg as soon possible !!! thank you !!!!!

#2 PGPhantom

PGPhantom

    Superman of SWI

  • Emeritus
  • PipPipPipPipPip
  • 3,494 posts

Posted 10 June 2004 - 12:30 AM

Symantec has an excellent write up here with detailed removal instructions. Run through the procedure, then ...

Can you please download HijackThis from this link, install it into C:\HJT. Run it, click on scan, save log and please post your entire log here for analysis.

Thank you.

#3 ahlai

ahlai

    Member

  • New Member
  • Pip
  • 2 posts

Posted 11 June 2004 - 11:57 AM

Logfile of HijackThis v1.97.7
Scan saved at 12:57:03 AM, on 6/12/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\Smc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\RunDll32.exe
C:\PROGRA~1\mcafee.com\agent\mcregwiz.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Sys

#4 PGPhantom

PGPhantom

    Superman of SWI

  • Emeritus
  • PipPipPipPipPip
  • 3,494 posts

Posted 11 June 2004 - 12:08 PM

I will need your entire log. Please be sure, once notepad is open, to click on "Edit" => "Select All' => "Edit" => "Copy" and paste the contents into a reply in this message.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button