Categories: Malware

BAT/Startpage.dropper malicious file

The BAT/Startpage.dropper is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/Startpage.dropper virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Installs a browser addon or extension
Attempts to modify Internet Explorer’s start page
Uses Windows utilities for basic functionality
Creates a hidden or system file
Attempts to modify proxy settings
Creates a copy of itself
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

user.qzone.qq.com

www.bing.com

How to determine BAT/Startpage.dropper?


File Info:
crc32: FC387364md5: de09107521cfbd192e1cf5ee9f99015aname: Tencent.EXEsha1: 7ec38f4b52cab830e849534bb6afd005aa4505e5sha256: ec5222965822dff300e86a720cf9ba2b7539672460f72ddb6135c3cd9eee639csha512: 6ec6f685d92f581ebaecf9563d5a4f27aebec00ca1d379949b9ff8466bc6ed9a2f780be5b83353d4fb4d8ae6fcd58ab7753a0d80190507dffb7dddd56f60061cssdeep: 3072:lPQt3aMxzd3o9fUPHC56IXsLkce6p23CskJXljt/wOl2RkHIgO:lPhaCEHpMGljt/RYkutype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: InternalName: FileVersion:  1. 1. 1. 2CompanyName: Tencent                                                                                     LegalTrademarks: Comments: ProductName: ProductVersion: 0.0.0.0FileDescription: x817ex8bafx56fex6807x70b9x4eae                                                                       OriginalFilename: Translation: 0x0409 0x04e4

BAT/Startpage.dropper also known as:

MicroWorld-eScan	Gen:Trojan.StartPage.jG1@aeLmbTki
nProtect	Trojan/W32.Agent.150126
McAfee	RDN/Generic StartPage!cc
VIPRE	Trojan.Win32.Generic!BT
TheHacker	Backdoor/Prorat.fnj
BitDefender	Gen:Trojan.StartPage.jG1@aeLmbTki
K7GW	Trojan ( 7000000f1 )
K7AntiVirus	Trojan ( 7000000f1 )
TotalDefense	Win32/ASuspect.HDDQC
Kaspersky	HEUR:Trojan.Win32.Generic
Agnitum	Trojan.Genome!oKpAMgu+6ak
Ad-Aware	Gen:Trojan.StartPage.jG1@aeLmbTki
Emsisoft	Gen:Trojan.StartPage.jG1@aeLmbTki (B)
F-Secure	Gen:Trojan.StartPage.jG1@aeLmbTki
McAfee-GW-Edition	BehavesLike.Win32.Packed.cm
Sophos	Mal/Generic-S
GData	Gen:Trojan.StartPage.jG1@aeLmbTki
ALYac	Gen:Trojan.StartPage.jG1@aeLmbTki
Tencent	Win32.Trojan.Startpage.Wrqf
AVG	BAT/Startpage.dropper