Aces High Bulletin Board

General Forums => Hardware and Software => Topic started by: Roscoroo on October 04, 2003, 12:24:09 AM

Title: Qhost trojan, Important !!! info
Post by: Roscoroo on October 04, 2003, 12:24:09 AM
this bug comes in thru active X scriptings and there is no AV fix for it it exploites IE and OE . go to this site for further info....

http://www.technewsworld.com/perl/story/31756.html
Title: Qhost trojan, Important !!! info
Post by: BaneX on October 04, 2003, 12:30:35 AM
This is what Tumor was running into in another thread.  I posted a url with some things you can try to fix the issue, but it's nto a definite.

shrpshtr
Title: Qhost trojan, Important !!! info
Post by: Roscoroo on October 04, 2003, 12:52:05 AM
I had a feeling thats what may have been going on w/ Tumor's pc

Had to start a warning thread though ....Micro trend has a deleation process for it but it looks like nooooooooo fun thats for shure.
Title: Qhost trojan, Important !!! info
Post by: BaneX on October 04, 2003, 12:56:53 AM
Yeah the whole process involves a registry hack and is pretty involved.  Annoying little trojan to say the least.

shrpshtr
Title: Qhost trojan, Important !!! info
Post by: BB Gun on October 04, 2003, 03:50:32 AM
So, if you use a popup killer, you are probably safe?

Sure sounds like it to me...

*pats google toolbar*

BB
Title: Qhost trojan, Important !!! info
Post by: Roscoroo on October 04, 2003, 10:33:49 AM
actually your not safe with a popup stopper for this one... its part of the unsigned active X scripting ... (that fancy flashy junk on webpages ect)  disable all your active X controls except for the signed ones (place those on prompt)

pop up stoppers stop unwanted pages from opening /instant downloads/that stupid porn virus/and other maliciuos stuff.

It does not stop active X or other java script virus's.
Title: Qhost trojan, Important !!! info
Post by: 214thCavalier on October 04, 2003, 02:48:03 PM
Check Windows update 2 new releases today.
Title: Qhost trojan, Important !!! info
Post by: GRUNHERZ on October 04, 2003, 08:39:53 PM
What releases? I seem to have this problem too.
Title: Qhost trojan, Important !!! info
Post by: Maverick on October 04, 2003, 10:28:04 PM
Does this involve resetting your home page every time you shut down yout PC as well??

I have looked for the cookie or whatever that did this but am ready to format again at this point. That will be the second time this week alone. :(
Title: Qhost trojan, Important !!! info
Post by: Roscoroo on October 05, 2003, 12:10:13 AM
Quote
Originally posted by Maverick
Does this involve resetting your home page every time you shut down yout PC as well??

I have looked for the cookie or whatever that did this but am ready to format again at this point. That will be the second time this week alone. :(


you have common spyware/ pornbot junk in your regestry

Deleate all your cookies/temp files...

then go to start/run/ msconfig /startup ......

look for the offending programs that shouldnt be there disable them . do not restart ..   write down the program thats causing this  " as example   C:/windows/ startup/spammypornbot.exe  "

go to start /find/ files,folders   type in  the offending exe search then delete these nasty things.

your favorites list should be full of this junk too... deleate those in there also . do a disk cleanup again  ..reset your browser to Msn or what ever...

then restart

this is one way to get rid of this ....

anouther way is to go to add/ remove programs and remove  it that way ... but sometimes its not always there, and if it is it doesnt get it all .


I cant guarrentee that this is your problem but this is a common cause of browser homepage getting changed ...

If you install a popup stopper  and configure your active X to trusted sites only / prompt
along with turning off java scripting  it will ussually stop this from happening .  this also prevents the Qhost trojan from getting you.

I went and looked at MS updates for IE today and i havent seen a correct patch for this .... (I only checked for win 98se) my XP is on my pc at work...
Title: Qhost trojan, Important !!! info
Post by: B17Skull12 on October 05, 2003, 02:48:27 AM
skuzzy might want to sticky this for a while.
Title: Qhost trojan, Important !!! info
Post by: 214thCavalier on October 05, 2003, 04:30:42 AM
http://www.microsoft.com/security/security_bulletins/ms03-040.asp

Dated October 3rd 2003
Title: Qhost trojan, Important !!! info
Post by: Roscoroo on October 05, 2003, 12:48:31 PM
the update isnt really much of a update i notice ... for 98 - nt it telling us to install a firewall .....

For XP it has a long list do this do that ... and a update for XP