The Web    Google
1/27: StartPage-FX Trojan Modifies IE Settings

1/27: StartPage-FX Trojan Modifies IE Settings
January 27, 2005

StartPage-FX is a Trojan that when executed, modifies the Internet Explorer search and start page settings to

It also adds a new link in the Favorites list: Free Hardcore Porn\Animal Sex.url

It may also attempt to install 2 gambling games called Everest Poker and Imperial Casino. Both were removed with Add/Remove within Control Panel.

The following registry keys are modified:

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer "SearchUrl"
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main "Search Bar"
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main "Search Page"
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Search "SearchAssistant"
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchUrl "SearchUrl"

More information can be found at McAfee page.

  • Global content security player establishes U.S. beachhead
  • 3/7: Forbot-EP Worm Targets Remote Shares
  • 6/17: Download.Ject Installs File
  • Wi-Fi Security Review: AirMagnet
  • More Fortification For Code
  • 8/3: MyDoom-Q Arrives in the Wild
  • 8/3: Scaner-A Worm Uses Port 445
  • Feinstein Tightens ID Theft Proposal
  • A Pattern Language For Spam
  • AOL Offers Top 10 Spam List to Aid in Battle
  • 9/7: Rbot-FL a Network Worm, Backdoor Trojan
  • Security Camera Price