http://www.sarc.com/avcenter/venc/da...an.qhosts.html

Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......

Get the latest hotfix: http://www.microsoft.com/security/se...s/ms03-040.asp

If no joy, run the Beta "Hijack This" utility which detects the HOSTS file that has been
taken over.
http://www.spywareinfo.com/~merijn/f...hijackthis.zip
Hijack This, How-to: http://mvps.org/winhelp2002/unwanted.htm

More info: http://www.spywareinfo.com/newslette...es/0903/30.php

HTH




--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_