Troj/StartPa-DA changes settings for Microsoft Internet Explorer and creates internet Shortcuts in the Favorites folder.
Troj/StartPa-DA adds its pathname to the following new registry entry to run itself on startup:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AddClass
Troj/StartPa-DA changes settings for Internet Explorer by creating or modifying values under the registry entries:
HKCU\SOFTWARE\Microsoft\Internet Explorer\Class Starts
HKCU\SOFTWARE\Microsoft\Internet Explorer\Styles\Use My Stylesheet = 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Styles\User Stylesheet
HKLM\SOFTWARE\Microsoft\Internet Explorer\Styles\Use My Stylesheet = 1
HKLM\SOFTWARE\Microsoft\Internet Explorer\Styles\User Stylesheet
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\SearchPage
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\SearchPage
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix\(Default)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\www
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\www.
The following internet shortcuts are created in the Favorites folder:
Find Anything in the Net.url
Find Hot Porn in the Net.url
Julley.Com - Fresh Free Porn Every Day With Thumbs! No bullshit!.url