Troj/Startpa-Z

Category: Viruses and Spyware
Type: Trojan
Prevalence: Several Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Startpa-Z is a simple Trojan that makes changes to Internet Explorer settings via the registry.

Troj/Startpa-Z changes the default start page of Internet Explorer to the URL http://aifind.info/ and will add a list of URLs containg adult content to the favourites folder. The Trojan will also change the following registry entries:

HKCU\Software\Microsoft\Internet Explorer\Styles\
Use My Stylesheet = 1

HKCU\Software\Microsoft\Internet Explorer\Styles\
User Stylesheet = <Windows>\hh.htt

HKLM\Software\Microsoft\Internet Explorer\Styles\
Use My Stylesheet = 1

HKLM\Software\Microsoft\Internet Explorer\Styles\
User Stylesheet = <Windows>\hh.htt

The stylesheet file hh.htt is detected by Sophos Anti-Virus as Troj/Startpa-BG.

download Try Sophos products for free
Download now