Java.StartPage

Risk Level 1: Very Low

Printer Friendly Page

Discovered: February 24, 2004
Updated: February 24, 2004 9:42:31 PM

Java.StartPage is a Trojan that changes a user's Internet Explorer start page and search page to a hardcoded URL in an effort to generate traffic for that site.

When an Internet Explorer user visits a web page with the embedded JavaScript Trojan, the Trojan attempts to modify one of the following registry keys so that they point to a hardcoded remote site:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\"Start Page"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\"Search Page"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\"Search Bar"
Search by name
Example: W32.Beagle.AG@mm
Limited Time Offers! Save up to 50%
Windows Vista Security