The StarTerminal malware takes over your web browsing experience by injecting code in the pages that you browse in order to manipulate your the content of the underlying web page in order to profit from the data it injects. It does this by injecting advertisements that would normally not appear on the web page, which may include search links, text links, video, product comparisons and reviews, coupons, graphics or banners, or other content displayed through your browser. When the malware discovers and offer/coupon that matches the content of the web page you are viewing, it displays a popup message with “deals” that they think you are interested in. It does this by tracking your behavior and the websites you tend to visit and the products you are interested. It then sends your behavior profile to its remote ad servers and every time you visit a new website or page it looks for offers it can make you. The offers take the form of discounts or banner ads for alternative products, etc. They also sneak in offers for other malware or adware programs.
StarTerminal is advertised as a product that will enhance your experience while viewing web sites, shopping or viewing videos. Though this may sound useful, the StarTerminal program is very intrusive and will display ads whether you want them to or not on the sites you visit. When installed, the StarTerminal browser plugin will display advertising banners, pop-up advertisements and in-text ads, stating that they are brought to you by “StarTerminal“. These ads will have different text under the pop-up: “Powered by StarTerminal“, “Brought to you by StarTerminal“, “You’ve received a premium offer from StarTerminal” or “Ads by StarTerminal“.
Whenever the software tracks your browsing on shopping websites (Amazon, Overstock) or various social sites (Pinterest, Facebook, Twitter) that matches your profile, StarTerminal will show in the right top part of your browser, a box containing related keyword suggestions, ads and sponsored links. In addition to these types of ads, the software will also inject other ads for more adware that even include items like PC optimizers and other unwanted programs. In some cases malware/exploits are injected in these advertisements if you click on them such as when you visit the websites of certain distribution partners, you may get an alert that you can click on to see specific coupons offers, or you may see a popup box your browser displaying various offers.