Categories: Malware

About “Win32/StartPage.ANI” infection

The Win32/StartPage.ANI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/StartPage.ANI virus can do?

Behavioural detection: Executable code extraction – unpacking
SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Attempts to modify Internet Explorer’s start page
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32/StartPage.ANI?


File Info:
name: D16407BBE0845F9D102E.mlwpath: /opt/CAPEv2/storage/binaries/34ba41aded6f5cbe28c3c28cb1a28ce7448077a15a5cc81033c1890a79f15f5ecrc32: 01FD603Emd5: d16407bbe0845f9d102e089444147067sha1: 1fbcc0ed433175b73b71680559df94c5e6bd8912sha256: 34ba41aded6f5cbe28c3c28cb1a28ce7448077a15a5cc81033c1890a79f15f5esha512: e5360eae23d42d26dcd81add90946d46416177ec3a027c9be18564ecc58a8dbdc2cc0df7fdd8175d805c4494abcfd217f08de92b6cd2f28fe9d49d1d4ca003aassdeep: 3072:RuCRDAWGBhTHMSy2Jb+kXP1H8NH4vAGwv6c5w9zKQ15RD:coDAWGwSy2JtdH8NH4vAGwCcY/pDtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T149342A26FE969484D83987F5392D806678353FB34364448B36C9FB3A1276A8332757CBsha3_384: 645d3b88654629485bab2ec785cad66f4045fb8fb1dcda0a431d4d349fdf45df1727ce09815ef84a5a2896b3b80c7708ep_bytes: 687c534100e8eeffffff000048000000timestamp: 2005-09-30 06:46:56
Version Info:
Translation: 0x0804 0x04b0Comments: 快打一族_控件注册程序CompanyName: EMPFileDescription: 快打一族_控件注册程序ProductName: 快打一族_控件注册程序FileVersion: 1.00ProductVersion: 1.00InternalName: regOriginalFilename: reg.exe

Win32/StartPage.ANI also known as:

Lionic	Trojan.Win32.Pasta.4!c
DrWeb	Trojan.StartPage.50699
MicroWorld-eScan	Trojan.GenericKD.37487815
FireEye	Trojan.GenericKD.37487815
McAfee	GenericRXNO-DG!D16407BBE084
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Pasta.rlo
K7AntiVirus	Trojan ( 0058db2a1 )
BitDefender	Trojan.GenericKD.37487815
K7GW	Trojan ( 0058db2a1 )
VirIT	Trojan.Win32.Generic.COLN
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/StartPage.ANI
Paloalto	generic.ml
ClamAV	Win.Malware.Pasta-9879038-0
Kaspersky	Trojan.Win32.Pasta.rlo
Alibaba	Trojan:Win32/Pasta.a8a48b7b
NANO-Antivirus	Trojan.Win32.Pasta.bjazlk
Sophos	Mal/Generic-S
Comodo	Malware@#2i5tylw4rfufz
Zillya	Trojan.Pasta.Win32.9774
Emsisoft	Trojan.GenericKD.37487815 (B)
Ikarus	Trojan.Win32.Pasta
Avira	TR/Rogue.8563211
Antiy-AVL	Trojan/Generic.ASMalwS.E8B5E
Kingsoft	Win32.Troj.Pasta.r.(kcloud)
ZoneAlarm	Trojan.Win32.Pasta.rlo
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.37487815
APEX	Malicious
Tencent	Malware.Win32.Gencirc.114c6994
MAX	malware (ai score=84)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.25CECF!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen