Follow:

You have been re-routed to the Trojan:Win32/Startpage.RH write up because Trojan%3aWin32%2fStartpage.RH has been renamed to Trojan:Win32/Startpage.RH
 

Trojan:Win32/Startpage.RH


Trojan:Win32/Startpage.RH is a trojan that may change the user's Internet Explorer home page.


What to do now

To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Additional remediation instructions for Trojan:Win32/Startpage.RH
This threat may make lasting changes to a computer’s configuration that are NOT restored by detecting and removing this threat. For more information on returning an infected computer to its pre-infected state, please see the following article/s: 

Threat behavior

Trojan:Win32/Startpage.RH is a trojan that may change the user's Internet Explorer home page.
 
Trojan:Win32/Startpage.RH arrives as a WinRAR SFX (a self-extracting archive). Upon execution, it may modify the registry to change the user's start page, add search links and hijack the search provider.
 
The trojan may add shortcuts to sites on the following domains:
 
  • go4321.com
  • 74443.com
  • meinvly.com
  • 1feel.net
 
The trojan may contact sites on the following domains:
 
  • 41119.cn
  • wz4321.com
  • 38522.com
 
The trojan may change the start page to sites on the dh4321.com domain.
 
Analysis by Matt McCormack

Symptoms

There are no common symptoms associated with this threat. Alert notifications from installed antivirus software may be the only symptoms.

Prevention


Alert level: Severe
First detected by definition: 1.87.789.0
Latest detected by definition: 1.185.3652.0 and higher
First detected on: Jul 28, 2010
This entry was first published on: Dec 08, 2010
This entry was updated on: Apr 17, 2011

This threat is also detected as:
No known aliases