Alias: Trojan.Win32.StartPage.agxj [Kaspersky Lab]
Here's an example of the modified home page in Internet Explorer: tt265(dot)net.
Adware.StartPage removal instructions:
1. Download free anti-malware software from the list below and run a full system scan.
NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as administrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.
2. New threats appear every day. In order to protect your PC from such (new) infections we strongly recommend you to use ESET Smart Security.
Adware.StartPage associated files and registry values:
Files:
- C:\Documents and Settings\All Users\Desktop\Internat Explorar.oc
- C:\Documents and Settings\[UserName]\Local Settings\Temp\temp_tmp.bat
- C:\Program Files\Microsoft\Internat Explorer\Desktop.ini
- C:\Program Files\Microsoft\Internat Explorer\target.lnk
- C:\Windows\System32\winproc32.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.oc "ocfile"
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\DefaultIcon "%1"
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\shell
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\shell\open
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\shell\open\command "explorer "%ProgramFiles%\Microsoft\Internat Explorer"
No comments:
Post a Comment