VBS.PassOn

Risk Level 1: Very Low

Printer Friendly Page

Discovered: April 11, 2001
Updated: February 13, 2007 11:58:17 AM
Also Known As: VBS/IEstart.gen, IEstart.A, Estart, VBS_IEstart.A


When VBS.PassOn is executed, it changes the default home page of Microsoft Internet Explorer by creating the value:

http://www.passthison.com

in the following registry key:

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\Start Page

Writeup By: Serghei Sevcenco
Search by name
Example: W32.Beagle.AG@mm
Windows 7
Windows Vista Security