Sophos

Troj/StartPa-MP

Aliases
  • Trojan.Win32.StartPage.io
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 13 December 2004 10:10:03 (GMT)
Last updated 17 March 2005 04:12:30 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing Trojans.

You should also change your Internet Explorer settings using Tools|Internet options|General to remove any modifications made by the Trojan.

More Information

Troj/StartPa-MP is a Trojan for the Windows platform. The Trojan will change the search pages in Internet Explorer to point to http://www.seekseek.com.

Troj/StartPa-MP will change or create the following registry entries:

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks
(965a592f-8efa-4250-8630-7960230792f1)

HKCU\Software\Microsoft\Internet Explorer\Main
Use Search Asst
"no"

HKLM\Software\Microsoft\Internet Explorer\Search
SearchAssistant
"http://www.seekseek.com/..."

HKLM\Software\Microsoft\Internet Explorer\Search
Search Assistant
"http://www.seekseek.com/..."

HKLM\Software\Microsoft\Internet Explorer\Search
CustomizeSearch
""

Several registries are made assocated with the CLSID (965a592f-8efa-4250-8630-7960230792f

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer