Trojan-Banker.Win32.Qhost.fj
Trojan-Banker.Win32.Qhost.fj is able to modify a victim's Windows Hosts file and redirect or block a user from accessing certain websites. Trojan-Banker.Win32.Qhost.fj may also have keylogger functionalities enabling it to capture a victim's keystrokes and gather confidential information such as passwords or credit card numbers. Trojan-Banker.Win32.Qhost.fj communicates with a remote server that it sends the stolen information to, and downloads harmful files from. Trojan-Banker.Win32.Qhost.fj is a security threat that should not remain on a computer system.
File System Details
Trojan-Banker.Win32.Qhost.fj may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %System%\atual.txt |
Registry Details
Trojan-Banker.Win32.Qhost.fj may create the following registry entry or registry entries:
GoogleUpdate = ""[file and pathname of the sample #1]""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
