Threat Search: 

ThreatExpert's Statistics for Troj/Qhost-O [Sophos]:

Troj/Qhost-O [Sophos] is also known as:
Threat AliasNumber of Incidents
W32/Autorun.worm.b [McAfee]141
Trojan:Win32/Qhost.V [Microsoft]104
not-a-virus:RiskTool.Win32.HideProc.c [Ikarus]49
Trojan-Spy.Win32.Agent.ccb [Kaspersky Lab]41
not-a-virus:AdWare.Win32.Agent.dyp [Kaspersky Lab]25
not-a-virus:RiskTool.Win32.HideProc.c [Kaspersky Lab]17
Adware.Agent!sd6 [PC Tools]15
Win-Trojan/Autorun.71168.B [AhnLab]13
W32.SillyFDC [Symantec]12
Trojan-Spy.Agent!sd6 [PC Tools]11
Trojan.Dropper [Symantec]9
Virus.Win32.AutoRun.ain [Kaspersky Lab]8
Trojan.KillAV [Symantec]6
Trojan.Win32.Agent.aebe [Kaspersky Lab]4
Trojan.Win32.Small.xup [Kaspersky Lab]4
Trojan-Downloader.Win32.VB.hqj [Kaspersky Lab]4
Generic Qhost [McAfee]3
Trojan-Downloader.Win32.Agent.aiux [Kaspersky Lab]3
Downloader [Symantec]2
TROJ_QHOST.NG [Trend Micro]2
Trojan.KillAV!sd6 [PC Tools]2
Trojan-Downloader.Win32.VB.gja [Kaspersky Lab]2
Trojan-Dropper.Agent [Ikarus]2
not-a-virus:Server-Proxy.Win32.CCProxy.63 [Kaspersky Lab]1
Suspicious.MH690 [Symantec]1
TROJ_QHOST.MM [Trend Micro]1
Trojan Horse [Symantec]1
Trojan.Crypt.NSPM [Ikarus]1
Trojan.Win32.Agent.byje [Kaspersky Lab]1
Trojan.Win32.Agent2.gnq [Kaspersky Lab]1
Trojan.Win32.FlyStudio.bz [Kaspersky Lab]1
Trojan-Downloader.Agent!sd6 [PC Tools]1
Trojan-Downloader.Win32.VB.hfn [Kaspersky Lab]1
Trojan-Downloader.Win32.VB.hsx [Kaspersky Lab]1
Trojan-Dropper.Win32.Agent.yhq [Kaspersky Lab]1
Trojan-Spy.Win32.Agent [Ikarus]1
W32.SillyDC [Symantec]1
W32/Autorun.worm.gen [McAfee]1
Win-Trojan/Agent.78336.AX [AhnLab]1
Win-Trojan/Agent.84937 [AhnLab]1
Worm.Win32.AutoRun.emn [Kaspersky Lab]1
Worm.Win32.Fujack [Ikarus]1
WORM_AUTORUN.BSU [Trend Micro]1

Troj/Qhost-O [Sophos] has the following possible country of origin:
OriginNumber of Incidents
China55

Troj/Qhost-O [Sophos] is known to be created as:
%AllUsersProfile%\uuseei.exe
%CommonPrograms%\startup\qqdoctor.exe
%FontsDir%\fonts.exe
%FontsDir%\lcsmssy.exe
%FontsDir%\smvs.exe
%FontsDir%\uows.exe
%FontsDir%\wyxp.exe
%FontsDir%\yuower.exe
%FontsDir%\yxowr.exe
%System%\svchosi.exe
%System%\war.exe
%Temp%\kafan virlist 2009.04.02\090402-a-38.exe
%Windir%\help\smccpi.exe
%Windir%\help\smcuu.exe
%Windir%\resources\themes\k.com
%Windir%\scw.exe
c:\setup.exe
Notes:
  • %AllUsersProfile% is a variable that specifies the all users' profile folder. By default, this is C:\Documents and Settings\All Users (Windows NT/2000/XP).
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.