JScript_Seeker_A!Trojan details

  • Description

    Alters the default startup & search pages for your web browser. The Windows Scripting Host must be installed for the trojan to run. May arrive as a file named ´runme.hta´. May change any of these registry settings: HKCUSoftwareMicrosoftInternet ExplorerMainDefault Page URL HKCUSoftwareMicrosoftInternet ExplorerMainDefault Search URL HKCUSoftwareNetscapeNetscape NavigatorMainHome Page Original registry values are saved to the any file ´HOMEREG111.REG´, ´BACKUP1.REG´, & ´BACKUP2.REG´ in the WINDOWS directory.

  • Alias

    JS.Seeker.Generic - named by Computer Associates.JS/Seeker.gen - named by McAfee.JS/Trojan.Seeker - named by Panda.Trojan.JS.Seeker.b - named by Kaspersky

  • Exe

    removeit.vta.exe