Trojan:Win32/Startpage.RH is a trojan that may change the user's Internet Explorer home page.
Trojan:Win32/Startpage.RH arrives as a WinRAR SFX (a self-extracting archive). Upon execution, it may modify the registry to change the user's start page, add search links and hijack the search provider.
The trojan may add shortcuts to sites on the following domains:
The trojan may contact sites on the following domains:
The trojan may change the start page to sites on the dh4321.com domain.
Analysis by Matt McCormack
There are no common symptoms associated with this threat. Alert notifications from installed antivirus software may be the only symptoms.