Trojan.WinREG.StartPage.bh
Trojan.WinREG.StartPage.bh is a Trojan created to hijack Homepages. Trojan.WinREG.StartPage.bh is able to spread via file-sharing networks and drive-by downloads. On entering a computer system, Trojan.WinREG.StartPage.bh will change the Homepage and internet settings of Internet Explorer by adding or modifying certain registry entries. Trojan.WinREG.StartPage.bh will also create a registry entry to ensure that it is executed every time the system is started up.
File System Details
Trojan.WinREG.StartPage.bh may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %AllUsersProfile%\Guest\Favorites | |
| 2. | %ProgramFiles%\Coopen\conf | |
| 3. | %ProgramFiles%\Coopen\image\Photo\local Photo | |
| 4. | %ProgramFiles%\Coopen\image\Wallpaper\local wallpaper | |
| 5. | %ProgramFiles%\Coopen\Templete | |
| 6. | %AllUsersProfile%\Guest | |
| 7. | %ProgramFiles%\Coopen | |
| 8. | %ProgramFiles%\Coopen\image\Photo | |
| 9. | %ProgramFiles%\Coopen\image\Wallpaper\coopen wallpaper | |
| 10. | %ProgramFiles%\Coopen\Resource\SkinFormal | |
| 11. | %ProgramFiles%\Winzp | |
| 12. | %Temp%\nsc8.tmp | |
| 13. | %Programs%\Coopen | |
| 14. | %ProgramFiles%\Coopen\image | |
| 15. | %ProgramFiles%\Coopen\image\Wallpaper | |
| 16. | %ProgramFiles%\Coopen\Resource | |
| 17. | %ProgramFiles%\Winsoftware. |
Registry Details
Trojan.WinREG.StartPage.bh may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBSFile\DefaultIcon]
