HTML/StartPage [Threat Name] go to Threat

HTML/StartPage.NAE [Threat Variant Name]

Category trojan
Detection created Apr 16, 2011
Detection database version 6047
Aliases Trojan:VBS/Startpage.AD (Microsoft)
Short description

HTML/StartPage.NAE is a trojan which tries to promote certain web sites. The program code of the malware is usually embedded in HTML pages.

Installation

The trojan does not create any copies of itself.


The trojan changes the home page of the following web browsers:

  • Internet Explorer

The following Registry entries are set:

  • [HKEY_LOCAL_MACHINE\­SOFTWARE\­Microsoft\­Internet Explorer\­Main]
    • "Start Page" = "http://duzceligenclik.com"
  • [HKEY_CURRENT_USER\­Software\­Microsoft\­Internet Explorer\­Main]
    • "Start Page" = "http://duzceligenclik.com"

The following Registry entries are created:

  • [HKEY_LOCAL_MACHINE\­SOFTWARE\­Policies\­Microsoft\­Internet Explorer\­Control Panel]
    • "HomePage" = 1
  • [HKEY_CURRENT_USER\­Software\­Policies\­Microsoft\­Internet Explorer\­Control Panel]
    • "HomePage" = 1
  • [HKEY_LOCAL_MACHINE\­SOFTWARE\­Microsoft\­Windows\­CurrentVersion\­URL\­Prefixes]
    • "mirc" = "http://duzceligenclik.com"
Other information

The trojan opens the following URLs:

  • http://duzceligenclik.com

Please enable Javascript to ensure correct displaying of this content and refresh this page.