Adware.StartPage.B

Updated: February 13, 2007 11:39:15 AM

Type: Adware

Risk Impact: Low

File Names: internst32.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.StartPage.B runs, it does the following:

Copies itself as %System%\internst32.exe.

Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Adds the value:

"ControlPanel"="%System%\internst32.exe internet.dll,LoadNetworkProfile"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the adware runs when you start Windows.
Modifies the value to:

"Start Page"="http:/ /www.selfsearch.biz"

in the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}