Additional remediation instructions for Trojan:Win32/Startpage.RH
This threat may make lasting changes to a computer’s configuration that are NOT restored by detecting and removing this threat. For more information on returning an infected computer to its pre-infected state, please see the following article/s:
Trojan:Win32/Startpage.RH is a trojan that may change the user's Internet Explorer home page.
Trojan:Win32/Startpage.RH arrives as a WinRAR SFX (a self-extracting archive). Upon execution, it may modify the registry to change the user's start page, add search links and hijack the search provider.
The trojan may add shortcuts to sites on the following domains:
The trojan may contact sites on the following domains:
The trojan may change the start page to sites on the dh4321.com domain.