Trojan:Win32/Startpage!pz removal tips

The Trojan:Win32/Startpage!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Startpage!pz virus can do?

• A file was accessed within the Public folder.
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Deletes executed files from disk
• Attempts to modify Explorer settings to prevent file extensions from being displayed
• Uses suspicious command line tools or Windows utilities
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Startpage!pz?

File Info:
name: 55B8D252737D27E45F61.mlw
path: /opt/CAPEv2/storage/binaries/bb440f7b86468d72089f15ff3ef805ec3817177434cb3644095f011ccf5e7a56
crc32: ACCB5BE1
md5: 55b8d252737d27e45f61105ee528764f
sha1: 6e29011f72e90b280a8cb9ef750cd35084557ac3
sha256: bb440f7b86468d72089f15ff3ef805ec3817177434cb3644095f011ccf5e7a56
sha512: 6a2ce3d63f01b8c2e816efdf84d4ad76e98d5f7d1c1d72f5598138ffda718d2d0b6d8b06b23757dc23103b3952685962e4fe44ae311a2e79a16029c8c43ca00a
ssdeep: 1536:V3cpyORJLuB4P4AJJv4Romu/J/xKzi+5uhOIi:V3c1fP4AJJv45mKO+Upi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D753CF1633D0C8A7DAA652725D77CBBAE3FBDE10162046476B206F7F3C31182A8275D6
sha3_384: d27a08c3d19b075cd2aa51602a233e4cda3250cac6270ef1c940540e49f3a3700b6d3df9fdd05802c7eecbf76f756469
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-18 21:33:27

Version Info:
0: [No Data]

Trojan:Win32/Startpage!pz also known as:

How to remove Trojan:Win32/Startpage!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.