We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
SettingsModifier:Win32/PossibleHostsFileHijack
Aliases: Trojan.Win32.Qhost (Kaspersky) Qhosts.apd (McAfee)
Summary
Windows Defender detects and removes this unwanted software.
This program makes changes to the Hosts file on your PC.
The Hosts file is used by your web browser to work out where to go. Malicious or unwanted software can change this file to stop you from going to certain websites, or to force you to go to other websites instead.
If you have changed the Hosts file yourself, you need to exclude it from detection by your antivirus software.
This program poses a moderate/medium threat to your PC.
Use the following free Microsoft software to detect and remove this threat:
- Microsoft Defender Antivirus for Windows 10 and Windows 8.1, or Microsoft Security Essentials for Windows 7 and Windows Vista
- Microsoft Safety Scanner
You should also run a full scan. A full scan might find other, hidden threats.
Reset the Hosts file
This unwanted software might change the contents of your Hosts file:
Exclude the Hosts file
If you have made changes to your Hosts file, you may need to exclude the Hosts file from scanning by your security software.
Get more help
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.
If you’re using Windows XP, see our Windows XP end of support page.
