  Zupe Premium,MVM join:2001-11-29 New York, NY clubs:
| reply to Paul928 Re: Browser Hijack!!
I think there are actually two variants of the search engine hijack seen in connection with the QHosts trojan. The first just modifies the standard Hosts file, so all that needs to be done is to remove the entries. The second, which is what pieter arntz is referring to, actually changes the path that windows uses for the hosts file, and then places a hijacking hosts file in the C:\Windows\Help directory. -- Brain: Pinky, are you pondering what I'm pondering? Pinky: I think so, Brain, but "Snowball for Windows"? [text was edited by author 2003-11-03 10:37:42] |