Trojan.StartPage.37414

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HaKz.exe' = '%WINDIR%\HaKz.exe'

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup81AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup82AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup83AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup78AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup79AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup80AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup84AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup88AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup89AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup90AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup85AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup86AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup87AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup77AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup67AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup68AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup69AVG Test Center.exe
%WINDIR%\Tasks\newScedule.exe
%HOMEPATH%\Start Menu\Programs\Startup65AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup66AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup70AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup74AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup75AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup76AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup71AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup72AVG Test Center.exe
%HOMEPATH%\Start Menu\Programs\Startup73AVG Test Center.exe

Creates the following files on removable media:

<Drive name for removable media>:\dokumenPenting.exe
<Drive name for removable media>:\puisi.txt
<Drive name for removable media>:\68Program file.exe
<Drive name for removable media>:\gambar.exe
<Drive name for removable media>:\HaKz_missing_U_again.exe
<Drive name for removable media>:\musik.exe
<Drive name for removable media>:\3gp.exe

Malicious functions:

To complicate detection of its presence in the operating system,

forces the system hide from view:

hidden files
file extensions

blocks execution of the following system utilities:

Windows Task Manager (Taskmgr)
Registry Editor (RegEdit)

Modifies settings of Windows Explorer:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoDrives' = '00000004'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoViewOnDrive' = '00000004'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFind' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoClose' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoRun' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'

Forces autoplay for removable media.

Sets a new unauthorized home page for Windows Internet Explorer.

Modifies file system :

Creates the following files:

<SYSTEM32>\dibebankan_anak_cucu.exe
<SYSTEM32>\pejabat_korup.exe
<SYSTEM32>\rakyat_menderita.exe
<SYSTEM32>\utang_negara_ini.exe
<SYSTEM32>\simpangLima.exe
<SYSTEM32>\ciblek.exe
<SYSTEM32>\berduka_untuk_nasib_bangsa.exe
<SYSTEM32>\gantiPemimpin.exe
<SYSTEM32>\gakKanSelesaikanMasalah.exe
<SYSTEM32>\mikirinNegara.exe
<SYSTEM32>\aparatIkutDibelakang.exe
<SYSTEM32>\boikot_hasilBumi.exe
<SYSTEM32>\takPernahCintaAlam.exe
<SYSTEM32>\iLegalLoggingMerajalela.exe
%WINDIR%\sewu_telu.exe
%WINDIR%\jamu_khas_jawa.exe
%WINDIR%\jangan_musnahkan_aku.exe
%WINDIR%\jangan_jd_cewek_gampangan.exe
%WINDIR%\request_dari_penggemar.exe
%WINDIR%\balasan_eMail.exe
%WINDIR%\jangan_asal_nulis_source.exe
<SYSTEM32>\KodeRed.exe
<SYSTEM32>\cterlAltDel.exe
<SYSTEM32>\BlackMagic.exe
<SYSTEM32>\rieysha.exe
%WINDIR%\peliharaanku.exe
%WINDIR%\anuku_milikbersama.exe
%WINDIR%\oemlogo.pif
<SYSTEM32>\mikirMakanBuatBesokAJA.exe
<SYSTEM32>\kkn_sambil_macarin_anak_pak_rt.exe
<SYSTEM32>\kerja_setengah2.exe
<SYSTEM32>\malming_maingame_sendiri.exe
<SYSTEM32>\sos.exe
<SYSTEM32>\did_i_ask_your_opinion.exe
<SYSTEM32>\BalikManingNangLaptop.exe
<SYSTEM32>\helpMePlease.exe
<SYSTEM32>\hacking_Friendster.exe
<SYSTEM32>\win34.exe
<SYSTEM32>\makan_harta_anak_yatim_lo.exe
<SYSTEM32>\Friendster_tempat_gaul.exe
<SYSTEM32>\gaDa_yangPeduli.exe
<SYSTEM32>\MIRC.exe
<SYSTEM32>\yahooMassangger.exe
<SYSTEM32>\nyatanya_banyak_busung_lapar.exe
<SYSTEM32>\janganCumaBilang.exe
<SYSTEM32>\GituAjaKokRepot.exe
<SYSTEM32>\jadi_tanaman.exe
<SYSTEM32>\susah.exe
<SYSTEM32>\mati_di_lumbung_padi.exe
<SYSTEM32>\katanya_tanah_dan_batu.exe
<SYSTEM32>\ihateLove.exe
<SYSTEM32>\SekolahInternasBosoJowo.exe
<SYSTEM32>\SuckLove.exe
<SYSTEM32>\litle2_I_See.exe
<SYSTEM32>\We_Are_New_Generation.exe
<SYSTEM32>\We_Dont_NEED_Education.exe
<SYSTEM32>\loking2FOR_Something.exe
%WINDIR%\pesan_lagu.exe
%WINDIR%\aplication.exe
%WINDIR%\winhlep.exe
%WINDIR%\SkeTel.exe
%WINDIR%\matamu.exe
%WINDIR%\mimik_asi_dulu.exe
%WINDIR%\susu_kental_manis_cap_cay.exe
%WINDIR%\asli_bikinan_jogja.exe
%WINDIR%\expl0rer.exe
%WINDIR%\alcmTrr.exe
%WINDIR%\alcwizrd.exe
%WINDIR%\MixCall.exe
%WINDIR%\gdebug.exe
%WINDIR%\regedut.exe
%WINDIR%\MSCUNIN.exe
%WINDIR%\virus_jogja.exe
%WINDIR%\kuda_troya.exe
%WINDIR%\kangen.exe
%WINDIR%\wormku.exe
%WINDIR%\C.exe
%WINDIR%\oem.exe
%WINDIR%\devil.exe
%WINDIR%\virut.exe
%WINDIR%\lokal.exe
%WINDIR%\cintaku_hilang.exe
%WINDIR%\alman.exe
%WINDIR%\brontok.exe
%WINDIR%\rontokBro.exe
%WINDIR%\riani.exe
%WINDIR%\DxApeX.exe
%WINDIR%\sejauh_kau_pergi.exe
%WINDIR%\meninggalkan_diriku.exe
%WINDIR%\disini_aku.exe
%WINDIR%\kepalamu_akan_pecah.exe
%WINDIR%\lo_salah_besar.exe
%WINDIR%\andai_kau_tahu.exe
%WINDIR%\separuh_otakku.exe
%WINDIR%\yang_seperti_dirimu.exe
%WINDIR%\oh_bintangku.exe
%WINDIR%\rolasan.exe
%WINDIR%\tapi_tak_ada.exe
%WINDIR%\merindukanmu.exe
%WINDIR%\kini_ku_coba.exe
%WINDIR%\mencari_penggantimu.exe
%WINDIR%\keracunan.exe
%WINDIR%\ketagihan.exe
%WINDIR%\epilepsi.exe
%WINDIR%\janganHapusAku.exe
%WINDIR%\sistemkomputerHank.exe
%WINDIR%\lookUp.exe
%WINDIR%\FolderKeren.exe
%WINDIR%\jangan_buang_aku.exe
%WINDIR%\jangan_anggap_aku_sampah.exe
%WINDIR%\lo_pikir_lo_sempurna.exe
%WINDIR%\ga_sengaja_kerekam.exe
%WINDIR%\seri_xxx.exe
%WINDIR%\jangan_bugil_depan_kamera.exe
%WINDIR%\jangan_ciuman_sembarang_tempat.exe
<SYSTEM32>78win31.exe
%APPDATA%78Admin.exe
<LS_APPDATA>78HaKz.exe
<LS_APPDATA>77HaKz.exe
<LS_APPDATA>76HaKz.exe
<SYSTEM32>77win31.exe
%APPDATA%77Admin.exe
%APPDATA%80Admin.exe
<LS_APPDATA>80HaKz.exe
<SYSTEM32>81win31.exe
<SYSTEM32>80win31.exe
<SYSTEM32>79win31.exe
%APPDATA%79Admin.exe
<LS_APPDATA>79HaKz.exe
%APPDATA%73Admin.exe
<LS_APPDATA>73HaKz.exe
<SYSTEM32>74win31.exe
<SYSTEM32>73win31.exe
<SYSTEM32>72win31.exe
%APPDATA%72Admin.exe
<LS_APPDATA>72HaKz.exe
<LS_APPDATA>75HaKz.exe
<SYSTEM32>76win31.exe
%APPDATA%76Admin.exe
%APPDATA%75Admin.exe
%APPDATA%74Admin.exe
<LS_APPDATA>74HaKz.exe
<SYSTEM32>75win31.exe
%APPDATA%81Admin.exe
<LS_APPDATA>87HaKz.exe
<SYSTEM32>88win31.exe
%APPDATA%88Admin.exe
%APPDATA%87Admin.exe
%APPDATA%86Admin.exe
<LS_APPDATA>86HaKz.exe
<SYSTEM32>87win31.exe
<SYSTEM32>90win31.exe
%APPDATA%90Admin.exe
<LS_APPDATA>90HaKz.exe
<LS_APPDATA>89HaKz.exe
<LS_APPDATA>88HaKz.exe
<SYSTEM32>89win31.exe
%APPDATA%89Admin.exe
<SYSTEM32>83win31.exe
%APPDATA%83Admin.exe
<LS_APPDATA>83HaKz.exe
<LS_APPDATA>82HaKz.exe
<LS_APPDATA>81HaKz.exe
<SYSTEM32>82win31.exe
%APPDATA%82Admin.exe
%APPDATA%85Admin.exe
<LS_APPDATA>85HaKz.exe
<SYSTEM32>86win31.exe
<SYSTEM32>85win31.exe
<SYSTEM32>84win31.exe
%APPDATA%84Admin.exe
<LS_APPDATA>84HaKz.exe
<LS_APPDATA>71HaKz.exe
%WINDIR%\repair\setup.exe
%WINDIR%\java\packet.exe
%WINDIR%\Registration\registy.exe
%WINDIR%\Fonts\rieyshaTrueType.exe
<SYSTEM32>\matiAjaLo.exe
C:\Documents and Settings\win321.exe
%WINDIR%\system\oeminfo.exe
%WINDIR%\msagent\agenkvr.exe
%WINDIR%\SoftwareDistribution\downloads.exe
%WINDIR%\Web\index.html
%WINDIR%\Media\restart.wav
%WINDIR%\Debug\adminMode.exe
%WINDIR%\Cursors\newCursor.exe
%WINDIR%\Media\newMedia.exe
<SYSTEM32>\yang_kamu_sedikitpun_tak_tahu.exe
<SYSTEM32>\kamu_pikir_hidup_ini_adil.exe
<SYSTEM32>\adil_jika_kamu_bahagia.exe
<SYSTEM32>\dengan_sedikit_pengetahuan.exe
<SYSTEM32>\doa_orang_teraniaya.exe
<SYSTEM32>\jangan_salahkan_aku.exe
<SYSTEM32>\aku_hanya_seonggok_daging.exe
<SYSTEM32>\SUDAHadaDIDEPANmata.exe
<SYSTEM32>\kamuPikir_KamuKeren.exe
<SYSTEM32>\cumaPakaiApaYangKamuMintaDariOrtu.exe
<SYSTEM32>\dan_coobaan_untukmu.exe
<SYSTEM32>\atas_kehidupanmu.exe
<SYSTEM32>\jangan_mengeluh.exe
<SYSTEM32>\karnaINI HANYAcOBAAN.exe
%WINDIR%\Registration\daftar.txt
%APPDATA%68Admin.exe
<LS_APPDATA>68HaKz.exe
<SYSTEM32>69win31.exe
<SYSTEM32>68win31.exe
<SYSTEM32>67win31.exe
%APPDATA%67Admin.exe
<LS_APPDATA>67HaKz.exe
<LS_APPDATA>70HaKz.exe
<SYSTEM32>71win31.exe
%APPDATA%71Admin.exe
%APPDATA%70Admin.exe
%APPDATA%69Admin.exe
<LS_APPDATA>69HaKz.exe
<SYSTEM32>70win31.exe
%WINDIR%\Web\printers\images\riey5ha.gif
%PROGRAM_FILES%\Internet Explorer\hacker.exe
%PROGRAM_FILES%\Internet Explorer\IEfree.exe
%WINDIR%\Web\printers\write.exe
%WINDIR%\Help\userhelping.exe
%WINDIR%\Temp\Intel.exe
%WINDIR%\Web\download.exe
%APPDATA%66Admin.exe
<LS_APPDATA>66HaKz.exe
C:\67Program file.exe
<SYSTEM32>66win31.exe
<SYSTEM32>65win31.exe
%APPDATA%65Admin.exe
<LS_APPDATA>65HaKz.exe
C:\azab_azab_cinta.exe
C:\tukul_lali_karo_githoke.exe
C:\alkid_sarang_penyamun.exe
C:\picture_cah_ndeso.exe
C:\setan_alas_mampir_ngombe.exe
C:\nduekku_yo_nduekmu.exe
C:\download.exe
C:\inspirasiku.exe
C:\separuh_nafasku_pergi_bersamamu.exe
C:\salam_kangen_buat_cinta.exe
C:\f0lder.exe
C:\ngisor_ringin_dinggo_mesum.exe
C:\cantik.exe
C:\folderBaruBuatMu.exe
C:\cintaku.exe
C:\filmku.exe
C:\31okt02.exe
C:\cerita_dari_hati_yang_terluka.exe
C:\hari_gini_perang_tarif.exe
C:\apa_aja_yang_gratis.exe
C:\source_Virus.exe
C:\ojo_dumeh_koe_sugeh.exe
C:\jogo_lambemu_su.exe
C:\dasar_pecundang_koe.exe
C:\komplikasi_anyang_anyangen.exe
C:\dariHP.exe
C:\komputer.exe
C:\ejakulasi_dini.exe
C:\grafity.exe
C:\loroJiwo.exe
C:\maria_ozawa.exe
C:\daftar_fans_club_miyabi.exe
C:\Tulisan_Untuk_Penderita_stress.exe
C:\game.exe
C:\mp3jadul.exe
C:\rieysha_sakit_hati.exe
C:\untuk_GURUKU.exe
C:\hapus_air_matamu.exe
C:\aplikasi_Keren.exe
C:\perpisahanSMA.exe
C:\temen2_chattingku.exe
C:\temenFS.exe
C:\temenSMA.exe
C:\daftarGaji.exe
C:\Cakep.exe
C:\program_Hack.exe
C:\eksplore_your_inspiration.exe
C:\Easy_listening.exe
C:\bacaan_anak_gaul.exe
C:\tutorial_bikin_virus.exe
C:\SKS.exe
C:\misteri.exe
C:\soal_soal_UAN.exe
C:\kebohongan_publik.exe
C:\penting.exe
C:\jangan_dihapus.exe
C:\titipan_Ade.exe
C:\racun_dunia.exe
C:\bokep.exe
C:\puisi_cinta.exe
C:\cs.exe
C:\tehnik_hacking.exe
C:\dari_warnet.exe
C:\daftar_nilai.exe
C:\untuk_cinta_yang_terluka.exe
C:\folder1.exe
C:\newFolder.exe
C:\kenangan_bersama_pacarku.exe
C:\jebol_windows.exe
C:\WE9.exe
C:\kapan_kamu_balik_ke_indonesia.exe
C:\crack.exe
C:\sakit_hati.exe
C:\music.exe
C:\3gp.exe
C:\cinta.exe
C:\WINDOW.exe
C:\HaKz.exe
C:\program.exe
C:\klik2x.exe
C:\tugas_sekolah.exe
C:\updateAVG.exe
C:\xxx.exe
C:\vidio.exe
C:\film_indie_jogja.exe
C:\fotoku.exe
C:\daftar_situs_faforit.exe
C:\jangan_ganggu_kebebasanku.exe
C:\aku_ingin_kamu_mati.exe
C:\rahasia.exe
C:\INDIEjogja.exe
C:\lagu_MANCA.exe
C:\jantungku_adalah_kamu.exe
C:\cerpen.exe
C:\surat_cinta.exe
C:\kumpulan_sms_lucu.exe
C:\broken_hearth.exe
C:\BackStreet.exe
C:\UjungUjungnyaDuit.exe
C:\cinta_monyet.exe
C:\clbk.exe
C:\curhatanku.exe
C:\jadwal_manggung.exe
C:\jadwal_sekolah.exe
C:\gambar.exe
C:\phishing.exe
C:\pesan_dari_virus_maker.exe
C:\rieysha_sayang.exe
C:\aku_sayang_sama_kamu.exe
C:\ingatkah_kamu_tentang_kenangan_itu.exe
C:\lagu_INDO.exe
C:\karyaku.exe
C:\lagu.exe
C:\laguBaruKu.exe
C:\myNovel.exe
C:\daftar_hotspot_nyaman.exe
C:\prambanan_bikin_putus.exe
C:\borobudur_termasuk_tujuh_keajaiban.exe
C:\warnet_gratis.exe
C:\promosikan_ke_radio2.exe
C:\Warnet_bikin_bt.exe
C:\hacking_warnet.exe
C:\WelcomeToHELL.exe
C:\masih_ada_hari_esok.exe
C:\panggil_tukang_reparasi.exe
C:\masakan_unik.exe
C:\jangan_remehkan_aku.exe
C:\daftar_kunjungan_wisata.exe
C:\lihat_lebih_dalam.exe
C:\bajakan.exe
C:\Thanks_To_Nero.exe
C:\gudeg_yuJum.exe
C:\yang_Mau_diburning.exe
C:\bukaAku.exe
C:\JanganDiKlik.exe
C:\SimpanDiFlasdisk.exe
C:\warnai_tembokmu_yorc.exe
C:\uno_juga_bisa.exe
C:\inc.exe
C:\berhati_nyaman.exe
C:\Special_moment_in_tugu.exe
C:\malioboro_ngulon.exe
C:\pasar_jajanan_dan_olah_raga.exe
C:\SedotWC.exe
%WINDIR%\asm.exe
%WINDIR%\cme.exe
%WINDIR%\w33.exe
%WINDIR%\TAKSMAN.com
C:\kasetRekamanku.exe
C:\hari_gini_mikir_cewek.exe
C:\mati_aja_low.exe
%WINDIR%\mySql.exe
%WINDIR%\mySkill.exe
%WINDIR%\assembler.exe
%WINDIR%\daftar_pertandingan_bola.exe
%WINDIR%\systemCom.exe
%WINDIR%\system88.exe
%WINDIR%\sYstem69.exe
C:\persewaan_tendaKursi.exe
C:\TambalBan.exe
C:\WartelKeliling.exe
C:\joki_umptn.exe
C:\BOOT_ro.exe
C:\rias_manten.exe
C:\jasa_skripsi.exe
C:\tarif_murah.exe
C:\telpon_kaleng.exe
C:\listenMyMusic.exe
C:\kartuPerdanaJOGJAJATENG.exe
C:\cuciMotorKhususCewek.exe
C:\Nonton21yukk.exe
C:\servisHp.exe
C:\lookMePlease.exe
C:\system.exe
C:\permainan.exe
C:\w32.exe
C:\gambar_orang_gila.exe
C:\blacklist.exe
C:\situs_situs_kesukaanku.exe
C:\bacaanAnakKecil.exe
C:\cintaku_tulus_untukmu.exe
C:\lukisan.exe
C:\pacarBaru.exe
C:\pesan_kematian.exe
C:\taskman.exe
C:\cmd.exe
C:\pertarungan_2hati.exe
C:\Cerita_setelah_MP.exe
C:\hilangnya_mahkota_Bunga.exe
C:\nekat.exe
C:\BandQ.exe
C:\kisah_pilu_hari_minggu.exe
C:\JJP_Kampus_Mengasikkan.exe
C:\persiapanNikah.exe
C:\daftar_korban_bencana_gempa07.exe
C:\jangan_didelete.exe
C:\musik_asik_jaman_sekarang.exe
C:\modifikasiMotorku.exe
C:\foto_ciuman_pertamaku.exe
C:\DAFTAR_NO_HP.exe
C:\artis_masa_depan.exe
C:\putus.exe
C:\simpanan_para_pejabat.exe
C:\anti_blokir_situs.exe
C:\pendem_wae_komputermu.exe
C:\asem_manis_cinta.exe
C:\lomba_boomber.exe
C:\ujian_hacker1.exe
C:\virus_pertamaku.exe
C:\RestInPeace.exe
C:\lintahDarat.exe
C:\CigareteBrand.exe
C:\jogjaPunyaVirus.exe
C:\100persen_aman.exe
C:\maniak.exe
C:\fotoKeluarga.exe
C:\rindu.exe
C:\jangan_nangis_gtu.exe
C:\sisakan_satu_hati_untukku.exe
C:\muak.exe
C:\hancur.exe
C:\ga_da_yang_perlu_dijelasin.exe
C:\pergi_dari_hadapanku.exe
C:\down.exe
C:\garis_keturunan.exe
C:\silsilah_cah_jogja.exe
C:\sadarkan_aku_dari_semua_ini.exe
C:\sisa_sisa_hidupku.exe
C:\editan.exe
C:\tryout.exe

Miscellaneous:

Searches for the following windows:

ClassName: 'Indicator' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial