Home Rogue Websites StartedWebsite.com

StartedWebsite.com

Posted: November 11, 2008

StartedWebsite.com, or StartedWebsite.com/security/xp, is installed by the ominous Zlob.Trojan and hijacks your browser by changing your home page to StartedWebsite.com. Your computer will display bogus alerts that state your computer is infected with spyware and that you need to purchase useless anti-spyware applications such as Windows Antivirus 2008 or Ultimate Antivirus 2008 to delete these infections. The fake alerts will look similar to Windows Security Center alerts in order to fool you into purchasing the rogue
software.

StartedWebsite.com/security/xp may slow down your computer. Trojan infections such as Trojan-Downloader.Win32, Zlob and Vundo use AHomePagePark.com/security/xp/ as one of their many hijacker pages to display on a computer user's desktop.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 duzakwq.dll
    2 gtawclv.dll
    3 icmntr.exe
    4 icthis.exe
    5 ictun.exe
    6 icun.exe
    7 isfmm.exe
    8 isfmntr.exe
    9 isfun.exe
    10 msmsgs.exe
    11 nvctrl.exe
    12 Online Security Guide.url
    13 pmmon.exe
    14 Security Troubleshooting.url
    15 spwoqbmv.exe
    16 VideoAccessCodecInstall.exe
    17 xbaqktfv.exe
    18 zafhemm.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}IExplorer Security Plug-inInternet Explorer Secure Bar

One Comment

  • Lex says:
    June 7, 2009 at 4:38 am

    Good morning. A tactical retreat is not a bad response to a surprise assault, you know. First you survive. Then you choose your own ground. Then you counterattack.
    I am from Tome and now study English, please tell me right I wrote the following sentence: "Anti ccr and abs each inhibited eosinophil chemotaxis induced by rh rantes.This is a simple supplement containing phytochemicals rosmarinic acid, luteolin and other flavonoids to target anti inflammatory and anti allergic."

    With respect 8), Kitty.

Loading...