F-Secure
Tools
Trojan:W32/StartPage
Summary
Also known as a trojan horse program, this is a deceptive program that performs additional actions without the user's knowledge or permission. It does not replicate.
Disinfection
Allow F-Secure Anti-Virus to disinfect the relevant files.
For more general information on disinfection, please see Removal Instructions.
Note
In many cases, StartPage trojans are dropped by other files, so that deleting the trojan's file is not always sufficient - the dropper must be found and deleted as well.
The startup keys for StartPage trojans should also be deleted from Windows Registry.
For more general information on disinfection, please see Removal Instructions.
Note
In many cases, StartPage trojans are dropped by other files, so that deleting the trojan's file is not always sufficient - the dropper must be found and deleted as well.
The startup keys for StartPage trojans should also be deleted from Windows Registry.
Additional Details
Trojan:W32/Startpage is usually a standalone file that changes startup page settings of Internet browsers. Sometimes search pages and favourites settings are changed as well.
Most of such trojans affect the Internet Explorer web browser, though some can affect other web browsers. Startpage trojans are quite often used by adware vendors.
Technical Details
A StartPage trojan can be a script file (VBS or JavaScript file) or a binary application (Java applet or Win32 application). There also exist StartPage trojans in the REG file format (Windows Registry export/import file).
Usually StartPage trojans modify the Registry to alter browser's settings. However, some of these trojans register themselves as components of Internet Explorer and therefore only activate when the browser starts. Once active, they then extract HTML pages and open them in the browser.
Most of such trojans affect the Internet Explorer web browser, though some can affect other web browsers. Startpage trojans are quite often used by adware vendors.
Technical Details
A StartPage trojan can be a script file (VBS or JavaScript file) or a binary application (Java applet or Win32 application). There also exist StartPage trojans in the REG file format (Windows Registry export/import file).
Usually StartPage trojans modify the Registry to alter browser's settings. However, some of these trojans register themselves as components of Internet Explorer and therefore only activate when the browser starts. Once active, they then extract HTML pages and open them in the browser.