W32/StartPage.KE!tr
Analysis
This small threat has one purpose - to change the home page for Internet Explorer. If the Trojan is run, it will adjust the registry to change the start page of Internet Explorer to open to this web page -
http://www.no-cache.ura-avto.ru
Recommended Action
Check the web interface for your Fortigate unit to ensure the latest AV/NIDS definitions have been downloaded and installed on your system - if required, enable the "Allow Push Update" option
Telemetry
Detection Availability
FortiGate | |
---|---|
Extended | |
FortiClient | |
FortiMail | |
FortiSandbox | |
FortiWeb | |
Web Application Firewall | |
FortiIsolator | |
FortiDeceptor | |
FortiEDR |