Malware

Startpage.16.BT removal guide

Malware Removal

The Startpage.16.BT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Startpage.16.BT virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

www.bing.com
www.uzzf.com
pic.uzzf.com

How to determine Startpage.16.BT?


File Info:

crc32: 9C715417
md5: a2229c1e0a804ce510fb08b0ecfb053a
name: kis_crack.exe
sha1: 3369b7463d34dd1f15313ca595d026dcd364e1ff
sha256: 98db07e39386592130bc0eb84feb8322a50f6ae82cea78733a382681734a9723
sha512: 89f4541557cb2405480975a47584f9559cd6dc3291f467d81a80c1d4e26c341e792a0a814599c4cd4b1b892edfa68b54d0a3ea904aad7b24985ed0a7c431b117
ssdeep: 49152:Fkhry+/epTp/t3H+oFDr/iBUJwKP5HYUganoOhrhOQ/Vi+kfaSx5Bw+qhvRRHh:Sr7+Teuj0U1P5HAan7rk2Vi0SvO+6bB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Startpage.16.BT also known as:

MicroWorld-eScanTrojan.StartPage.ZZT
CAT-QuickHealTrojan.Startpage
McAfeeArtemis!A2229C1E0A80
K7GWTrojan ( 004b8fb11 )
K7AntiVirusTrojan ( 004b8fb11 )
ArcabitTrojan.StartPage.ZZT
BaiduMulti.Threats.InArchive
F-ProtREG/StartPage
SymantecTrojan.Startpage
TotalDefenseTnega.XAVF!suspicious
Paloaltogeneric.ml
GDataTrojan.StartPage.ZZT
KasperskyTrojan.Win32.StartPage.balf
BitDefenderTrojan.StartPage.ZZT
NANO-AntivirusTrojan.Reg.StartPage.bdjfd
RisingTrojan.Generic (cloud:gUjSY4RHaZS)
SophosMal/Generic-S
ComodoUnclassifiedMalware
F-SecureTrojan.StartPage.ZZT
DrWebTrojan.StartPage.54021
Invinceatrojan.winreg.startpage.m
McAfee-GW-EditionStartPage-NY!reg
EmsisoftTrojan.StartPage.ZZT (B)
SentinelOnestatic engine – malicious
CyrenREG/StartPage
JiangminTrojan/StartPage.ntj
AviraTR/StartPage.zzta
Antiy-AVLTrojan/Win32.StartPage.balf
Endgamemalicious (high confidence)
AegisLabTroj.Downloader.W32.Agent.lntM
ZoneAlarmTrojan.Win32.StartPage.balf
MicrosoftTrojan:WinREG/Startpage.M
AhnLab-V3Win-Trojan/Startpage.117587
VBA32REG.StartPage.NAN
PandaTrj/CI.A
ESET-NOD32REG/StartPage.NAN
TencentWin32.Trojan.Startpage.Lizq
IkarusTrojan.Win32.StartPage
FortinetRiskware/StartPage.DJ
AVGStartpage.16.BT
AvastWin32:StartPage-API [Trj]
CrowdStrikemalicious_confidence_100% (W)
Qihoo-360Win32/Trojan.3a7

How to remove Startpage.16.BT?

Startpage.16.BT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment