Google Adsense Infected by Trojan.Qhost.WU

Romanian antivirus company BitDefender has reported that the advertisements placed by Google on the web sites are being hijacked by a Trojan virus called Trojan.Qhost.WU. Trojan.Qhose.WU will replace the intended text with ads from a different provider and thence redirect the queries meant to be sent to Google servers to other rogue servers, which display ads from a third party instead of ads from Google.

Trojan.Qhost.WU is identified by BitDefender as spreading at a “low” level and causing” medium” damage to users. Google has responded that it has cancelled customer accounts that display ads redirecting users to malicious sites or that advertise a product violating its software principles. Google is working hard to detect and remove the sites that serve malware in both its ad network and its search result.

In the event users suspect to be infected by this Trojan or intend to check out whether they have infected, they can use the solution provided by BitDefender:

Check for Trojan.Qhost.WU Infection:
Go to Start > Run > ping -t pagead2.googlesyndication.com

The response should look similar to this: Pinging pagead.l.google.com [6x.xxx.xxx.xxx] with 32 bytes of data; where the x’s represent digits. If users are not infected, the first digit will be a 6 (as in the example). If users are infected, the first digit will be a 9.

If users’ computer are infected by Trojean.Qhost.WU, they can try out freeware SmitFraudFix v2.274. Users can download the latest version of SmitFraudFix removal tool via here to and read the removal instruction to clean the infected virus.

Share and contribute or get technical support and help at My Digital Life Forums.



3 Responses to “Google Adsense Infected by Trojan.Qhost.WU”

  1. Perliukai #420 : nežinau.lt
    December 21st, 2007 22:01
    1

    [...] Pasirodo, virusai dabar gali pagrobti ir reklamą internete. Trojan.Qhost.WU Google Adsense reklamų nuorodas nukreipia į visokias nešvankybes. Jei [...]

  2. Ian C. Purdie
    December 29th, 2007 05:33
    2

    When I pinged I interestingly received:

    Reply from 74.125.19.165: bytes=32 time=216ms TTL=238

  3. Aikidoka
    September 6th, 2008 10:32
    3

    I’ve suspected my computer has been infected by some malware, but don’t know how to check it.

    Thanks for this useful step by step tips.

    Best regards,
    Aikido World

Leave a Reply

You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Subscribe without commenting


Custom Search

New Articles

Incoming Search Terms for the Article

pagead.l.google - pagead.l.google.com - pagead.I.google - trojan.qhost.wu - trojan qhost - pagead.google - pagead google - what is pagead.i.google - google smitfraudfix - 74.125.19.165 - how to remove pagead - remove trojan.qhost.wu - remove pagead.I.google - qhost - remove pagead - pagead.I - google pagead - Qhost trojan - trojan google search - firefox 3 pagead - google trojan in spanish - Trojan.Qhost.WU femoval tool - y - virus pagead.google - Trojan.Qhost.WU - remove qhost trojan - Google Adsense Infected by Trojan.Qhost.WU - "pagead.l.google.com" - pagead google delay - script google ads trojan - adsense virus remove - pagead.l.google.com trojan - pagead.i.google problem - google connection hijacked by ads - virus replace adsense own ads - "pagead.i.google" - disable pagead google syndication - problems with pagead.I.google - pagead.I:google - pagead.l.google.com/pagead - QHost trojan HOTMAIL - "google trojan" "remove" - "pagead.l.google" - pagead.I.google... - google redirect - adsense clicker virus - GOOGLE INFECTED WITH REDIRECT - infected with trojan for mobile - google ads trojan audio - how to remove the qhost virus -