Home page changing to WWW.google.co.in

[Migration User]

Dear All,

In our office, We are using SEP 11 MR 6, in our desktops. In some of the PC's since 28th, users have reported that their default home page

has changed to WWW.google.co.in, they are not able to change it. We have observed that the the signatures are current. Suspecting malware activity, we have done a full scan, but it has not yielded any results. On checking Microsoft website, the symptoms resemble that of Trojan.JS/ Start page R.

We have submitted the samples to mysupport, are yet to get any reply. Based on some the blogs in this site, i have checked the Proactive threat protection and have raised the sensitivity level to 50 %. But still no effect. Please let me know whether any one has come across this problem?

How far SEP is effective in identifying and blocking Trojans. Whether we need to have any ANTI-TROJAN software seperately?

[ℬrίαη]

I've seen this happen before however the page will usually be redirected to something malicious. This is just Google.

What homepage do you have set under Internet Browser Protection in your AV policy?

[Mithun Sanghavi]

 

Hello,

This seems to be a duplicate post of: 

https://www-secure.symantec.com/connect/forums/ie-7-home-page-changing-wwwgooglecoin

However, could you try upgrading the IE 7 to IE version 8 and check if that resolves the issue.

 

[Thomas K]

Sounds like a possible infection. Please PM me your case number, and I will check the status of your submission.

 

Thanks,

Thomas