high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 3 November 2005 10:53:29 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Paymite-D is a Start Page Trojan for the Windows platform.
In order to run at system startup, Troj/Paymite-D will set the following registry entries:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
PayTime
<Windows system folder>\paytime.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
PayTime
<Windows system folder>\paytime.exe
Troj/Paymite-D changes settings for Microsoft Internet Explorer, including the Start Page, by modifying values under:
HKCU\Software\Microsoft\Internet Explorer\Main\
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Page_URL
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page
Troj/Paymite-D may also attempt to run the following files if they exist:
<Windows folder>\tool2.exe
<Windows system folder>\countrydial.exe
|
