Welcome to the Virus Encyclopedia of Panda Security.
It prevents users from visiting several web sites, usually belonging to security software vendors.
|First detected on:||May 11, 2004|
|Detection updated on:||Oct. 7, 2009|
Qhost.gen is a generic detection of a modification of the file HOSTS, which belongs to the Windows operating system.
The file HOSTS contains several lines that Windows checks in order to solve the names to IP addresses. Windows checks this file before checking other services, such as WINS or DNS.
Some malware, specially some variants of the worm Gaobot, overwrite or add some lines to that file, and they associate a list of web addresses to the IP127.0.0.1 (local host address). By doing so, affected users will not be able to visit these web sites included in the list.
These web sites usually belong to different security software vendors, so the affected user is unable to visit these sites or update the antivirus solution, etc.
Qhost.gen is difficult to recognize, as it does not display any messages or warnings that indicate it has reached a computer.
However, if you are unable to visit certain web sites, which belong to security software vendors, your computer is probably affected by Qhost.gen.