Virus:DR/StartPage.AD
Date discovered:16/07/2009
Type:Dropper
In the wild:Yes
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low to medium
Static file:Yes
File size:16.981.330 Bytes
MD5 checksum:aa5c8f637696e68b9b8b82a2c3491155
IVDF version:7.01.04.96 - Tuesday, June 16, 2009

 General Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Drops files
   • Registry modification

 Files The following files are created:

– Non malicious file:
   • %home%\Local Settings\Tempvlc-0.9.9-win32.exe

– %TEMPDIR%\vlcsetup.exe Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too. Detected as: TR/StartPage.SL

 Registry The following registry key is changed:

– [HKCU\Software\Microsoft\Internet Explorer\Main]
   Old value:
   • "Start Page"="about:blank"
   New value:
   • "Start Page"="http://www.losstarten.de/"

Description inserted by Laura Gheorghe on Friday, August 7, 2009
Description updated by Laura Gheorghe on Friday, August 7, 2009

Back . . . .