Detected by Trend Micro as TROJ_QHOST.GC, this Trojan modifies a computer’s HOSTS file to prevent users from connecting to page2.googlesyndication.co. This particular site directs to a server for advertisements enrolled to AdSense, the advertising service offered by Google.

What this Trojan does instead, is that it makes the browser point to another IP address that functions as a rouge server to third party advertisements about gambling and pornography.