Follow:

 

Trojan:Win32/Wysotot!lnk


Microsoft security software detects and removes this threat.

This threat is usually dropped by Win32/Wysotot.

It changes the home page of your browser.



What to do now

The following free Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

Win32/Wysotot!lnk is a shortcut file created by Win32/Wysotot to change the home page of your browser.

If you click on a file detected as Win32/Wysotot!lnk, your home page is changed to a different website. We've seen home pages changed to point to these websites:

  • 22apple.com
  • 22find.com
  • delta-homes.com
  • en.v9.com
  • portaldosites.com
  • qvo6.com
  • v9.com
  • v9tr.com

Your home page is changed if you have any of these browsers as your default browser:

  • Internet Explorer
  • Firefox
  • Opera
  • Chrome

Analysis by Edgardo Diaz


Symptoms

The following could indicate that you have this threat on your PC:

  • Your home page has been changed to any of these websites:
    • 22apple.com
    • 22find.com
    • delta-homes.com
    • en.v9.com
    • portaldosites.com
    • qvo6.com
    • v9.com
    • v9tr.com

Prevention


Alert level: Severe
First detected by definition: 1.163.48.0
Latest detected by definition: 1.165.1392.0 and higher
First detected on: Nov 19, 2013
This entry was first published on: Jan 15, 2014
This entry was updated on: Jun 16, 2014

This threat is also detected as:
No known aliases