kmkwok

ahhh damn it lol it doesn't work for manually delete the bs.exe in RC, may I ask which path are they or just randomly search?? kmkwok

Hi, I also got this virus. It disable my norton live update, and it won't let me goto norton's download page to download the virus definition or the qhost removal tools. I used a non-infected computer to download them and tried to run them on my infected computer. The removal tool simply just doesn't work (variation maybe?) and after I update my virus definition, and enable the auto protect manually, it said right the way that I got the qhost virus in my host file located in c:\windows\system32\drivers\etc\host and it automatically deleted it. After that I will be able to browse norton's page. However, after I restart my system, the problem comes again, NAV auto protect won't start and cannot browse norton's page. I check the registry with the info Alecstaar given, it's all fine, the path of host file is right, the dns delay are in default setting. I also use msconfig.exe and tried to look up any bs.exe in the startup section and I find nothing. Now I just change the values of the dns delay in registry, change the attribute of host to read only, going to restart my system and see how will it go... p.s. man, this virus is annoying kmkwok