Trojan-Dropper.Win32.StartPage Description

Trojan-Dropper.Win32.StartPage is a Trojan that drops malware onto compromised machines. Trojan-Dropper.Win32.StartPage targets computers running Windows operating systems. Once Trojan-Dropper.Win32.StartPage has infiltrated a system it will create a start-up registry entry and may even block a user’s access to reputable security websites. Trojan-Dropper.Win32.StartPage should be removed from an infected PC with a reliable security tool promptly after detection.

Type: Trojans

How Can You Detect Trojan-Dropper.Win32.StartPage?

Trojan-Dropper.Win32.StartPage has typically the following processes in memory:

• %CommonAppData%\wangdun\KSWebShield.exe
• %CommonAppData%\wangdun\kswebshield.dll
• %CommonAppData%\wangdun\kwsui.dll
• %CommonAppData%\wangdun\kswbc.dll
• %CommonAppData%\wangdun\kwssp.dll

Trojan-Dropper.Win32.StartPage creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ServiceCurrent]
• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent]

Important Article Disclaimer