Troj/IEStart-K launches Microsoft Internet Explorer every 1 hour and attempts to display a search page associated with www.searchwww.com.
Related components of this Trojan may change settings for Microsoft Internet Explorer by setting the following regsitry entries:
HKCU\Software\Microsoft\Internet Explorer\Main\
Search Page = http://www.searchwww.com/
HKCU\Software\Microsoft\Internet Explorer\Main\
Start Page = http://www.searchwww.com/
HKCU\Software\Microsoft\Internet Explorer\MenuExt\
Shorten URL = http://www.cjb.net/menuext.html
HKLM\Software\Microsoft\Internet Explorer\Search\
SearchAssistant = http://www.searchwww.com/bar.html
Troj/IEStart-K is typically installed as search.vbs along with a file named search.inf.