Google Adsense Infected by Trojan.Qhost.WU

Romanian antivirus company BitDefender has reported that the advertisements placed by Google on the web sites are being hijacked by a Trojan virus called Trojan.Qhost.WU. Trojan.Qhose.WU will replace the intended text with ads from a different provider and thence redirect the queries meant to be sent to Google servers to other rogue servers, which display ads from a third party instead of ads from Google.

Trojan.Qhost.WU is identified by BitDefender as spreading at a “low” level and causing” medium” damage to users. Google has responded that it has cancelled customer accounts that display ads redirecting users to malicious sites or that advertise a product violating its software principles. Google is working hard to detect and remove the sites that serve malware in both its ad network and its search result.

In the event users suspect to be infected by this Trojan or intend to check out whether they have infected, they can use the solution provided by BitDefender:

Check for Trojan.Qhost.WU Infection:
Go to Start > Run > ping -t pagead2.googlesyndication.com

The response should look similar to this: Pinging pagead.l.google.com [6x.xxx.xxx.xxx] with 32 bytes of data; where the x’s represent digits. If users are not infected, the first digit will be a 6 (as in the example). If users are infected, the first digit will be a 9.

If users’ computer are infected by Trojean.Qhost.WU, they can try out freeware SmitFraudFix v2.274. Users can download the latest version of SmitFraudFix removal tool via here to and read the removal instruction to clean the infected virus.


3 Responses to “Google Adsense Infected by Trojan.Qhost.WU”

  1. Aikidoka
    September 6th, 2008 10:32
    3

    I’ve suspected my computer has been infected by some malware, but don’t know how to check it.

    Thanks for this useful step by step tips.

    Best regards,
    Aikido World

  2. Ian C. Purdie
    December 29th, 2007 05:33
    2

    When I pinged I interestingly received:

    Reply from 74.125.19.165: bytes=32 time=216ms TTL=238

  3. Perliukai #420 : nežinau.lt
    December 21st, 2007 22:01
    1

    [...] Pasirodo, virusai dabar gali pagrobti ir reklamą internete. Trojan.Qhost.WU Google Adsense reklamų nuorodas nukreipia į visokias nešvankybes. Jei [...]

Leave a Reply

You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Subscribe to comments feature has been disabled. To receive notification of latest comments posted, subscribe to My Digital Life Comments RSS feed or register to receive new comments in daily email digest.
Custom Search

New Articles

Incoming Search Terms for the Article

google ad services pagead aclk - googleadservices pagead aclk - trojan qhost-165 - www.google.com/aclk -