vbs_startpage.e, win32/startpage.bg
tipo: virus
tama?o: 1,852 bytes
origen: internet
destructivo: no en la calle (in the wild): si detección y eliminación: the hacker 5.6 al 19/01/2004
vbs/startpage.e, es un virus que modifica la p?gina de inicio y b?squeda del internet explorer, esta escrito en visual basic script.
cuando el gusano se ejecuta modifica las siguientes entradas en el registro para cambiar la p?gina de inicio del internet explorer:
hkey_current_user\software\microsoft\internet explorer\main start page=http://www.search[xxxxx] go.com/search.hmtl default_page_url=http://www.search [xxxxx] go.com/search.hmtl
default_search_url=http://www.search [xxxxx] go.com/search.hmtl
search page= http://www.search [xxxxx] go.com/search.hmtl
hkey_current_user\software\microsoft\internet explorer\search
searchassistant=http://www.search [xxxxx] go.com/search.hmtl
customizesearch=http://www.search [xxxxx] go.com/search.hmtl
default_search_url=http://www.search [xxxxx] go.com/search.hmtl
hkey_local_machine\software\microsoft\internet explorer\main
start page=http://www.search [xxxxx] go.com
search page=http://www.search [xxxxx] go.com/search.hmtl
search bar=http://www.search [xxxxx] go.com/search.hmtl
use search asst=no
hkey_local_machine\software\microsoft\internet explorer\searchurl
predeterminado=http://www.search [xxxxx] go.com
hkey_local_machine\software\microsoft\internet explorer\search
searchassistant=http://www.search [xxxxx] go.com/search.hmtl
customizesearch=http://www.search [xxxxx] go.com/search.hmtl |
