Discovered: February 24, 2004
Updated: February 24, 2004 9:42:31 PM
Java.StartPage is a Trojan that changes a user's Internet Explorer start page and search page to a hardcoded URL in an effort to generate traffic for that site.
When an Internet Explorer user visits a web page with the embedded JavaScript Trojan, the Trojan attempts to modify one of the following registry keys so that they point to a hardcoded remote site:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\"Start Page"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\"Search Page"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\"Search Bar"