Trojan/StartPage.Liom

Trojan/StartPage.Liom病毒类型：木马危害等级：*影响平台：Win9X/2000/XP/NT/MeTrojan/StartPage.Liom修改IE默认页和搜索页，是个dll控件，该控件程序中没有卸载代码，导致注册后无法卸载。该控件插入ie进程，每次打开则显示自己资源中的html广告程序。传播过程及特征：1.创建文件：%SystemDir%configsoftware, 6115328字节2.修改注册表：病毒通过修改下列注册表键值，改变IE默认主页等信息：/HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain"Search Page" = res://%43%3a%5c%6c%69%6f%6d%2e%64%6c%6c/%73%70%2e%68%74%6d%6c/HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain"Start Page" = about:blank/HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain"HOMEOldSP" = about:blank/HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain"Search Bar" = res://%43%3a%5c%6c%69%6f%6d%2e%64%6c%6c/%73%70%2e%68%74%6d%6c/HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain"Use Search Asst" = no/HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain"Use Custom Search URL" =

• ·Trojan/PSW.MiFeng.70
• ·Trojan/StartPage.jx
• ·广东学而优书店
• ·TrojanProxy.Bobax.c
• ·Trojan/PSW.Zypws.al
• ·Worm/Dedler.o
• ·秦金根
• ·Trojan/PSW.LdPinch.al
• ·Trojan/PSW.Passking.d
• ·周宝