Home / malware

PDF

Trojan:W32/StartPage

First posted on 04 May 2010.
Source: SecurityHome

Aliases :

There are no other names known for Trojan:W32/StartPage.

Explanation :

Also known as a trojan horse program, this is a deceptive program that performs additional actions without the user's knowledge or permission. It does not replicate.

Additional DetailsTrojan:W32/Startpage is usually a standalone file that changes startup page settings of Internet browsers. Sometimes search pages and favourites settings are changed as well.

Most of such trojans affect the Internet Explorer web browser, though some can affect other web browsers. Startpage trojans are quite often used by adware vendors.

Technical Details

A StartPage trojan can be a script file (VBS or JavaScript file) or a binary application (Java applet or Win32 application). There also exist StartPage trojans in the REG file format (Windows Registry export/import file).

Usually StartPage trojans modify the Registry to alter browser's settings. However, some of these trojans register themselves as components of Internet Explorer and therefore only activate when the browser starts. Once active, they then extract HTML pages and open them in the browser.

Last update 04 May 2010

 

TOP