Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Troj/StartPa-Y

Mar 8, 2004 11:33PM PST

Aliases
Trojan.JS.StartPage.a, JS/StartIE.B, JS/IEStart.gen.d, VBS.StartPage

Type
Trojan

Description
Troj/StartPa-Y is a simple Trojan which creates new registry entries or changes existing entries related to Microsoft Internet Explorer, thus changing the default start and search pages for the browser. The registry entries are:
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\Main\Search Page
HKCU\Software\Microsoft\Internet Explorer\Main\Search Bar

Troj/StartPa-Y also adds the following registry entry in an attempt to run itself on startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\tlc


More: http://www.sophos.com/virusinfo/analyses/trojstartpay.html

Discussion is locked