Home / malware

PDF

Trojan:Win32/Startpage.BR

First posted on 18 March 2010.
Source: SecurityHome

Aliases :

Trojan:Win32/Startpage.BR is also known as Generic StartPage!bb (McAfee), Win32/StartPage.NMH (ESET), Trojan.StartPage.ZKZ (BitDefender), Trojan.Win32.Pasta.daz (Kaspersky), Trojan Horse (Symantec).

Explanation :

Trojan:Win32/StartPage.BR is detection for a trojan that changes the stored start page settings for the Web browser Internet Explorer.
Top

Trojan:Win32/StartPage.BR is detection for a trojan that changes the stored start page settings for the Web browser Internet Explorer. InstallationThis trojan may be installed by other malware. Payload Modifies Internet Explorer start pageWhen run, the trojan replaces the stored Internet Explorer start page setting with one of the following links by modifying the registry: www.a2articles.com
www.a6articles.com
www.a8articles.com
www.articleslot.info
www.skyarticle.net It modifies the start page by replacing the stored value in the following registry entry with one of the above randomly selected Web sites: Modifies value: "Start Page"
With value: "< hyperlink >"In subkey: HKCU\Software\Microsoft\Internet Explorer\main

Analysis by Wei Li

Last update 18 March 2010

 

TOP