x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Qhost.gen

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Qhost.gen
Technical name:Trj/Qhost.gen
Threat level:Low
Type:Trojan
Effects:  

It prevents users from visiting several web sites, usually belonging to security software vendors.

Affected platforms:

Windows 2003/XP/2000/NT

First detected on:May 11, 2004
Detection updated on:Oct. 7, 2009
StatisticsNo

Brief Description 

    

Qhost.gen is a generic detection of a modification of the file HOSTS, which belongs to the Windows operating system.

The file HOSTS contains several lines that Windows checks in order to solve the names to IP addresses. Windows checks this file before checking other services, such as WINS or DNS.

Some malware, specially some variants of the worm Gaobot, overwrite or add some lines to that file, and they associate a list of web addresses to the IP127.0.0.1 (local host address). By doing so, affected users will not be able to visit these web sites included in the list.

These web sites usually belong to different security software vendors, so the affected user is unable to visit these sites or update the antivirus solution, etc.

Visible Symptoms 

    

Qhost.gen is difficult to recognize, as it does not display any messages or warnings that indicate it has reached a computer.

However, if you are unable to visit certain web sites, which belong to security software vendors, your computer is probably affected by Qhost.gen.