This memory-resident Trojan program may be a dropped file of a malware installation package. It may also be manually downloaded by a user through the Internet.It modifies the Internet Explorer (IE) startup page to point to about: blank and the IE search page and search assistant to File: %Temp%sp.html.(Note: %Temp% is the default Windows temporary files folder.)