Trojan.Qhost.WU Removal Guide

Do you know what Trojan.Qhost.WU is?

There's a new Trojan called Trojan.Qhost.WU that hijacks Google Adsense (text advertisements), in order to redirect ads from Google servers to a rogue server that displays ads from a third party. Trojan.Qhost.WU changes the infected machine's Hosts file and redirects the host ‘page2.googlesyndication.com' to point to a different IP of a different address.

It is a blow for both Google and webmasters because Trojan.Qhost.WU is taking away viewers and possible revenue from their websites.

Check for Trojan.Qhost.WU Infection:

Go to Start > Run > ping -t pagead2.googlesyndication.com

Result: Pinging pagead.l.google.com [6x.xxx.xxx.xxx] with 32 bytes of data:

If the first digit is a 6, you're not infected. If the first digit is a 9, you're infected with Trojan.Qhost.WU.

Aliases: W32/Trojan2.JRR, Trojan.Qhost.45077, Trojan.Win32.Qhost.wu, W32/Qhost.WU!tr, TR/Qhost.WU.

In non-techie terms: Distributors of trojans conduct illicit installation methods to extort money from you. You should update the latest definitions of your anti-spyware program or try SmitFraudFix to remove Trojan.Qhost.WU from your computer.

Tags: .
  • http://spyware-adware-reviews.upickreviews.com Upickreviews

    Many thanks for the information.