Class Trojan-Spy
Platform Win32


When launched, the Trojan modifies the following registry key value:

[HKCUSoftwareMicrosoftInternet ExplorerMain]
“Start Page” = “”

This results in the Internet Explorer home page being changed the

Technical Details

This Trojan will change the Internet Explorer home page. It is a Windows PE EXE file. The file is 60,416 bytes in size. It is written in Delphi.

Removal instructions

  1. Use Task Manager to terminate the Trojan process
  2. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
  3. Revert the Internet Explorer home page to its previous setting.
  4. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
Find out the statistics of the threats spreading in your region