NOD32 detect virus on my HOST...

I don't remember if I tried to run SpywareBlaster when that virus detection apear...
Maybe SpywareBlaster check the Hosts file when is started...

I don't have the hostslist.sss on my disk...

 

Good catch Bubba. I forgot about that feature in Spywareblaster.

In any event, thanks to all for the clarification, and thanks to HB for getting us a fix on this FP.

Regards,

Jag

 

Well kids,

Sigs. update v1.1094(20050512) fixes your concerns.

At least here it does.

 

I am having the same problem here.....

Time Module Object Name Virus Action User Information
05/11/2005 20:28:19 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts.thm Win32/Qhosts trojan quarantined - deleted PUFFMD\Kent Event occurred on a new file created by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe. The file was moved to quarantine. You may close this window.
05/11/2005 20:25:05 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts.thm Win32/Qhosts trojan quarantined - deleted PUFFMD\Kent Event occurred on a new file created by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe. The file was moved to quarantine. You may close this window.
05/11/2005 20:22:41 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\MailWasher Pro\MailWasher.exe.
05/11/2005 20:21:55 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\PROGRA~1\WEATHE~1\WEATHE~1.EXE.
05/11/2005 20:21:41 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\The Bat!\thebat.exe.
05/11/2005 20:19:43 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\MailWasher Pro\MailWasher.exe.
05/11/2005 20:19:21 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined - deleted PUFFMD\Kent Event occurred on a new file created by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe. The file was moved to quarantine. You may close this window.
05/11/2005 20:19:17 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts.thm Win32/Qhosts trojan quarantined - deleted PUFFMD\Kent Event occurred on a new file created by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe. The file was moved to quarantine. You may close this window.
05/11/2005 20:15:08 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
05/11/2005 20:14:38 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\MailWasher Pro\MailWasher.exe.
05/11/2005 20:14:23 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\Windows NT\Accessories\WORDPAD.EXE.
05/11/2005 20:14:00 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
05/11/2005 20:13:43 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
05/11/2005 20:12:44 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\Opera\Opera.exe.
05/11/2005 20:11:59 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\PROGRA~1\WEATHE~1\WEATHE~1.EXE.
05/11/2005 20:10:23 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe.
05/11/2005 20:09:45 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\MailWasher Pro\MailWasher.exe.
05/11/2005 20:09:32 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe.
05/11/2005 20:08:32 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan PUFFMD\Kent Event occurred at an attempt to access the file by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe.
05/11/2005 20:08:23 PM AMON file C:\WINDOWS\system32\drivers\etc\hosts Win32/Qhosts trojan quarantined - deleted PUFFMD\Kent Event occurred on a new file created by the application: C:\Program Files\abelhadigital.com\HostsMan\hm.exe. The file was moved to quarantine. You may close this window.

It all started after 1.1093 update and running HostsMan available HERE.

 

The problems was fixed with 1.1094

Thanks

 

Oh really? What a suprise

 

You didn't said that you went to sleep!?

 

It should work now right? There was a problem that this QHost Trojan does also add some parts of your clean host file. (to kick out competition trojans...) and this part was detected in your host file. Fixed now.

 

For me, now works fine

Thanks

 

Same here...

 

Amen.