We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/Startpage.ACS
Detected by Microsoft Defender Antivirus
Aliases: Dropper/Malware.820940 (AhnLab) Trojan.StartPage.34171 (Dr.Web) not-a-virus:Client-IRC.Win32.mIRC.603 (Kaspersky) Generic PUP.z!fl (McAfee)
Summary
Trojan:Win32/Startpage.ACS is a trojan that modifies the affected user's web browser start page and also installs a modified version of mIRC, an Internet chat application.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Additional remediation instructions for Trojan:Win32/Startpage.ACS
This threat may make lasting changes to a computer's configuration that are NOT restored by detecting and removing this threat. For more information on returning an infected computer to its pre-infected state, please see the following article/s:
- Changing your Internet Explorer Home Page:
- For Windows 7: http://windows.microsoft.com/en-us/windows7/Change-your-Internet-Explorer-home-page
- For Internet Explorer 7 and 8 in Windows Vista: http://windows.microsoft.com/en-US/windows-vista/Change-your-Internet-Explorer-home-page
- For Internet Explorer 6: http://support.microsoft.com/kb/252464
- Changing or choosing the default Search provider in Internet Explorer 7 and 8: http://windowshelp.microsoft.com/Windows/en-US/help/78e85c0d-ff1f-4eac-b1b2-a1443d60fcb91033.mspx