Antivirus and Security Software from Sophos

Sophos blogs

JS/QHosts21-A

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 3 November 2004 20:09:43 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing Trojans.

Change any data that may have become compromised.

More Information

JS/QHosts21-A is a JavaScript Trojan that redirects some banking websites to a bogus website for the purpose of gathering information. JS/QHosts21-A is a JavaScript Trojan that redirects some banking websites to a bogus website for the purpose of gathering information.

JS/QHosts21-A comes as a HTML email that will display the Google website. As it is doing so it will add lines to the Windows Hosts file that will cause requests for the following websites to be redirected:

www.unibanco.com.br
www.caixa.com.br
www.bradesco.com.br

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer