Sophos

WebHelper Startpage

Category
Type
What to do
  • If you've received an alert for a blocked PUA or adware and decide that the application is not suitable for your workplace, then follow the instructions for removing PUAs.

Summary

 
Affected operating systems Windows
Included in our products from August 2008 (4.32)
Protection available since 1 July 2008 10:07:18 (GMT)
Detected by Sophos Anti-Virus for Windows, versions 6 and 7 and PureMessage for Microsoft Exchange.

More Information

WebHelper Startpage is an Adware application for the Windows platform.

WebHelper Startpage copies itself to <System>\stw.exe and sets the following registry entry to run itself on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
STW
<System>\stw.exe

WebHelper Startpage drops the file <System>\search.html, and sets the following registry entry to make it the default start page on some internet browsers:

HKCU\Software\Microsoft\Internet Explorer\Main
Start Page
<System>\search.html

WebHelper Startpage may modify values at the following registry location:

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

WebHelper Startpage creates entries at the following registry location:

HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WebHelper Software

RSS|Atom
Get reports about the latest adware and potentially unwanted applications (PUAs) delivered to your computer