Sophos

Troj/StartPa-HZ

Aliases
  • Trojan.Win32.StartPage.afu
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 15 November 2005 21:55:14 (GMT)
Last updated 24 April 2007 08:30:39 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing Trojans.

You should also check your Internet Explorer settings using Tools|Internet options|General for any modifications made by the Trojan.

More Information

Troj/StartPa-HZ is a Trojan for the Windows platform.

The Troj/StartPa-HZ DLL is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKCR\CLSID\(7288C0BD-7F2F-4229-A0C4-3C90A6E2A881)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\(7288c0bd-7f2f-4229-a0c4-3c90a6e2a881)

The Trojan uses the BHO name "HomepageBHO".

The Trojan modifies the behavior of Internet Explorer by changing the start and home page properties. Registry entries may be modified under:

HKLM\SOFTWARE\Microsoft\Internet Explorer\Main
StartPage

The Trojan has the ability to download further content and may post browsing details to a remote site.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer