Trojan:Win32/Startpage!pz information

The Trojan:Win32/Startpage!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Startpage!pz virus can do?

• A file was accessed within the Public folder.
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• CAPE detected the shellcode patterns malware family
• Deletes executed files from disk
• Attempts to modify Explorer settings to prevent file extensions from being displayed
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Startpage!pz?

File Info:
name: 098A6CC1046468CADBB2.mlw
path: /opt/CAPEv2/storage/binaries/595eef696d20e9a72f6d26c51764a059c77a0164525df169f13b84de7b9d8113
crc32: 3A97599A
md5: 098a6cc1046468cadbb291d6f13268e8
sha1: 13e5e77a221c4a2699016059158630b90a616ed2
sha256: 595eef696d20e9a72f6d26c51764a059c77a0164525df169f13b84de7b9d8113
sha512: c8884caad10e51a086adbab4e6ac6330a610a3db6fdd99a02bf578963e58d4ce92309f59bfb2371c8b61a59dfde80084b0a4efd797f6851f7b361afb2b12a647
ssdeep: 768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/QosWpH+DrCUpfp:V3cpyORJLuB4P4AJJv4Romu/9tpvUZ5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13443CF5A33D4C8B3EA5746715D77DB7AE6F79E00022016573B60AF3F3C310939A2A682
sha3_384: cd6c5313185282a19561ecbc67ec01c427e7a51c8944b03f9da9e71eb24b19ba268c6b33b0a578b942e1956d548eca2d
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-18 21:33:27

Version Info:
0: [No Data]

Trojan:Win32/Startpage!pz also known as:

How to remove Trojan:Win32/Startpage!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.