Home Malware Programs Browser Hijackers ProtectStartPage.com

ProtectStartPage.com

Posted: May 20, 2008

ProtectStartPage.com is a dangerous rogue website and a browser hijacker from the Trojan.Zlob family. ProtectStartPage.com promotes rogue anti-spyware programs in hopes of profiting from gullible computer users. ProtectStartPage.com may hijack your browser and redirect it to a webpage that advertises rogue anti-spyware programs.

ProtectStartPage.com may also display misleading messages of virus threats with on your Taskbar. ProtectStartPage.com misleading message starts:

"Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 149,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click "OK" to download officially approved security software.
Always keep your patch levels up-to-date."

ProtectStartPage.com may prove dangerous to your security and privacy and, therefore, should be avoided at all costs. If ProtectStartPage.com has already infected your machine, we strongly recommend you to scan your system for Zlob and other possible infections. ProtectStartPage.com advertises rogue anti-spyware programs such as VirusHeat and AntispywareShield.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msmsgs.exe
    2 nvctrl.exe
Loading...