QHosts.apd

The trojan virus QHosts.apd is blocking my windows update. McAfee deletes the
virus at each session but the update function still doesn´t work. Starting
the pc in safe mode and using Avert stinger or McAfee to clean the system
didn´t work.

Is there anybody who knows how to get rid of this "goddam" virus?

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Stinger doesn't traget the QHosts Trojan family so you wasted your time. If you read the
following URL you would know this by seeing what Stinger targets --
http://vil.nai.com/vil/stinger/

Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

Delete all files in the TEMP directory.

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt392.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




"Rainer" <> wrote in message
news:2FAAA90B-5DD7-4D50-8BC8-...
| The trojan virus QHosts.apd is blocking my windows update. McAfee deletes the
| virus at each session but the update function still doesn´t work. Starting
| the pc in safe mode and using Avert stinger or McAfee to clean the system
| didn´t work.
|
| Is there anybody who knows how to get rid of this "goddam" virus?
|

Just use the Panda Software online virus scanner, you prolly got a new
version of a virus i had and panda picked it off, it was found in a file
named cmsr.exe or something, or the file was the virus. Microsoft suggested
using Panda in previous posts. I tried using microtrend first and it found
squat.

Now to get the hosts file fixed so update works again hahaha

"Rainer" wrote:

> The trojan virus QHosts.apd is blocking my windows update. McAfee deletes the
> virus at each session but the update function still doesn´t work. Starting
> the pc in safe mode and using Avert stinger or McAfee to clean the system
> didn´t work.
>
> Is there anybody who knows how to get rid of this "goddam" virus?
>

Hi David,

didn´t work! I followed all steps accurately. Virusscan found the virus and
deleted it, but -- however, it was back again after finalizing. It still
blocks all updates of Microsoft, McAfee etc..

I wonder where I got this virus from because it is not my internet pc. This
pc is only on the net when uploading data to our media server that is
definitely virus free.

"David H. Lipman" wrote:

> There are anti virus News Groups specifically for this type of discussion.
>
> microsoft.public.scripting.virus.discussion
> microsoft.public.security.virus
> alt.comp.virus
> alt.comp.anti-virus
>
> Stinger doesn't traget the QHosts Trojan family so you wasted your time. If you read the
> following URL you would know this by seeing what Stinger targets --
> http://vil.nai.com/vil/stinger/
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
>
> start --> settings --> control panel --> internet options --> delete files
>
> Delete all files in the TEMP directory.
>
> 1) Download the following three items...
>
> Trend Sysclean Package
> http://www.trendmicro.com/download/dcs.asp
>
> Latest Trend signature files.
> http://www.trendmicro.com/download/pattern.asp
>
> Adaware SE (free personal version v1.05)
> http://www.lavasoftusa.com/
>
> Create a directory.
> On drive "C:\"
> (e.g., "c:\New Folder")
> or the desktop
> (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
>
> Download SYSCLEAN.COM and place it in that directory.
> Download the Trend Pattern File by obtaining the ZIP file.
> For example; lpt392.zip
>
> Extract the contents of the ZIP file and place the contents in the same directory as
> SYSCLEAN.COM.
>
> 2) Update Adaware with the latest definitions.
> 3) If you are using WinME or WinXP, disable System Restore
> http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
> 4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
> 5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
> platform and clean/delete any infectors/parasites found.
> (a few cycles may be needed)
> 6) Restart your PC and perform a "final" Full Scan of your platform using both the
> Trend Sysclean utility and Adaware
> 7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
> System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
> 8) Reboot your PC.
> 9) If you are using WinME or WinXP, create a new Restore point
>
> * * * Please report back your results * * *
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
>
>
>
>
> "Rainer" <> wrote in message
> news:2FAAA90B-5DD7-4D50-8BC8-...
> | The trojan virus QHosts.apd is blocking my windows update. McAfee deletes the
> | virus at each session but the update function still doesn´t work. Starting
> | the pc in safe mode and using Avert stinger or McAfee to clean the system
> | didn´t work.
> |
> | Is there anybody who knows how to get rid of this "goddam" virus?
> |
>
>
>

Hi Edward,

thanks for your advice but unfortunately it didn´t work. Please read my note
to David. Just the same happened with Panda.


"Elvin Edwards" wrote:

> Just use the Panda Software online virus scanner, you prolly got a new
> version of a virus i had and panda picked it off, it was found in a file
> named cmsr.exe or something, or the file was the virus. Microsoft suggested
> using Panda in previous posts. I tried using microtrend first and it found
> squat.
>
> Now to get the hosts file fixed so update works again hahaha
>
> "Rainer" wrote:
>
> > The trojan virus QHosts.apd is blocking my windows update. McAfee deletes the
> > virus at each session but the update function still doesn´t work. Starting
> > the pc in safe mode and using Avert stinger or McAfee to clean the system
> > didn´t work.
> >
> > Is there anybody who knows how to get rid of this "goddam" virus?
> >