Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||Trj/StartPage.EH, CWS-iesprt, Secure.html, CWS-Cashsearch, Trojan.Win32.StartPage.ho|
It does not allow to access certain web pages. It changes the home page of Internet Explorer and several search options.
|First detected on:||May 24, 2004|
|Detection updated on:||Feb. 2, 2007|
|Yes, using TruPrevent Technologies
StartPage.EH is a Trojan that changes the home page and several search options of the browser Internet Explorer.
StartPage.EH modifies the HOSTS file, in order not to allow the user to access several web sites. In addition, it goes memory resident and does not allow to save the changes made to the Windows Registry.
StartPage.EH does not spread automatically using its own means. It needs the attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, e-mail messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.
StartPage.EH is easy to recognize, as it changes the home page of Internet Explorer to http://jksearch.biz/redir.php.