View MDO database (O21)

Showing entries 1 to 21 of 21.

(Q) O21 - SSODL: Adobe Acrobat 5.0 - {679F7126-2794-292C-1449-0AD271509E13} - c:\program files\adobe\acrobat 5.0\reader\winltmwhf32.dl
Related to Adobe Acrobat 5. Check for updates.
http://get.adobe.com/reader/
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: CDRead - {E880CA1A-987A-409B-B7E4-B2A94FDB08EE} - drv.dll (file missing)
Virus/trojan.
Fix / Info: HJT and Virus/trojan removal programs.
http://www.sarc.com/avcenter/venc/data/trojan.mitglieder.p.html
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: DDE Module - {DABB23E9-AC0D-3740-E3E5-4B37C80837E5} - C:\WINDOWS\SYSTEM\wirl.dll
Troj/Craften-A is a Trojan for the Windows platform.
Fix / Info: HJT and Virus/trojan removal programs.
http://www.sophos.com/virusinfo/analyses/trojcraftena.html
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: eeler - {1559e6c1-7e5e-4461-9457-6a2dea85eb9f} - C:\WINDOWS\system32\titiau.dll
Added by the Smitfraud family of trojans!
Fix / Info: HijackThis - SpySherriff - Smitfraud family of trojans.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: Engrtf - {ABB18658-604E-4A10-8152-8832FD0D4C6D} - C:\WINDOWS\System32\appcal.dll
Description: The CLSID and filename not in Google database.
Fix / Info: Hjackthis, delete file, malware removal tools.
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: eplrr9 - {25A851EB-A5F3-4E0E-BB7E-449551C94068} - C:\WINDOWS\SYSTEM\mspdnx.dll
Related to Troj/Haxdoor-X is a multi-component downloader Trojan
Fix / Info: HijackThis
http://www.sophos.com/virusinfo/analyses/trojhaxdoorx.html
Windows ALL; discovered by n

(X) O21 - SSODL: MSMserv - {3AA9C5D0-CD3A-42D0-B350-8F7B3932AC49} - C:\WINDOWS\System32\mswshfra.dll
Description: The CLSID and filename not the consistent. Google checked.
Fix / Info: Hjackthis, delete file, malware removal tools.
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: MSTskMgr32 - {941852D5-B76D-409D-B7C4-C13ECC3A5609} - C:\WINDOWS\System32\xcopevxx.dll
Random CLID and file name.
Fix / Info: HijackThis
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: mtkle - {330649C5-AEF6-4E02-6782-83E9AB30000F} - C:\WINDOWS\System32\idapq32.dll
trojan. Win32.Blewfit.A
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=41596
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: mtklef - {54924928-45C5-44A8-C4BB-51F7FC0B3E20} - C:\WINDOWS\System32\cibayk32.dll
trojan. Win32.Blewfit.A
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=41596
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: mtklef - {FBC820CB-5DC2-42EA-D083-3491DDE6C37E} - (no file)
Win32.Blewfit.A
Fix / Info: HijackThis, Trojan and Virus scan.
Win32.Blewfit.A
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: mtklefa - {1B710B0E-3756-4A44-A992-DC7EE8F8B2F5} - C:\WINDOWS\System32\rovhm32.dll
trojan. Win32.Blewfit.A
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=41596
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: mtklefap - {5E272F04-5EEA-4F4C-2EBA-AFE12A636FE5} - C:\WINDOWS\System32\kzzsoi32.dll
trojan. Win32.Blewfit.A
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=41596
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: NTDBGTOOL - {C213DB69-EA39-42D1-9661-BD45DCF771BD} - C:\WINDOWS\system32\keybtelc.dll
Should be fixed.
Fix / Info: HijackThis, delete file,
http://forum.malwareremoval.com/viewtopic.php?t=373
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: NTDBGTOOL - {CE2FED62-42B0-4495-82A5-3C29D7881C74} - C:\WINDOWS\System32\ir41gdev.dll
Troj/PPdoor-B a backdoor Trojan with proxy functionality.
Fix / Info: HJT and Virus/trojan removal programs.
http://www.sophos.com/virusinfo/analyses/trojppdoorb.html
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: NTLog32 - {B146AA80-D1CA-42CD-9B15-A5E5034C5BC6} - C:\WINDOWS\System32\ncpambol.dll
Should be fixed.
Fix / Info: HijackThis, delete file,
http://forum.malwareremoval.com/viewtopic.php?t=373
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: pQhDvrpEnHu - {58D384BD-F279-2E17-304A-5D0A75FFC530} - C:\WINDOWS\System32\lkvdvyx.dll
Found in a Horseserver infection.
Fix / Info: Use HSFix from http://www.atribune.org/downloads/HSFix.zip
http://spywareinfoforum.com/index.php?act=Post&CODE=02&f=18&t=42578
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: Security Shedule - {C98F5DF5-6302-4551-9A72-C81E25E72228} - C:\WINDOWS\system32\nwcdial.dll
Unknown source.
Fix / Info: HijackThis, delete file,
http://spywareinfoforum.com/index.php?act=ST&f=18&t=47216
Windows ALL; discovered by Nasdaq

(X) O21 - SSODL: System - {9A64A5C3-2804-4572-854F-721772A8E981} - vr_sys.dll (file missing)
Trojan using random CLSID see url.
Fix / Info: HJT and Virus/trojan removal programs.
http://www.sophos.com/virusinfo/analyses/trojldpinchba.html
Windows ALL; discovered by Nasdaq

(L) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll (Microsoft Corporation)
Website Monitor
http://www.systemlookup.com/O21/222-SYSDIR_webcheck_dll.html
Windows ALL; discovered by nasdaq

(X) O21 - SSODL: webwork - {4C611512-2C1D-44b2-A044-872AD2AD5A61} - C:\WINNT\webwork\webwork.dll
Added by an parasite of Chinese origin.
Fix / Info: Use the sUBs' ComboFix with the /wow switch described in the topic/URL below.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=87473
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.