View all database entries

ALL  PP  F0  F1  F2  F3  R0  R1  N1  N2  N3  N4  O1  O2  O3  O4  O5  O6  O7  O8  
O9  O10  O11  O12  O13  O14  O15  O16  O17  O18  O19  O20  O21  O22  O23  CHR  FF  

View MDO database (O6)

Showing entries 1 to 25 of 107.

Go directly to page: 1  2  3  4  5  

(Q) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
If this was set by a LAN Adminitrator do not fix it, ask him/her first. Fixing this 06 items will reset the Control Panel Menu options which were probably disabled when Spybot and Destroy was installed.
Fix / Info: HijackThis
Windows ALL; discovered by Nasdaq
(Q) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
If this was set by a [b]LAN Adminitrator[/b] do not fix it, ask him/her first.Fixing these 06 items will reset your Control Panel Menu options
Fix / Info: see note
Windows ALL; discovered by nasdaq
(Q) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
If this was set by a LAN Adminitrator do not fix it, ask him/her first. Fixing these 06 items will reset your Control Panel Menu options which were probably disabled when you installed Spybot and Destroy.
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktop = 1
Restrict Changes to Active Desktop Settings - May have seen set by an IT Administrator
http://www.pctools.com/guides/registry/detail/541
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktopChanges = 1
Restrict Changes to Active Desktop Settings
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 0
This setting means: No Display the UAC dialog box for the Adminstrator. It may have been set by a IT Administrator.
http://www.computerperformance.co.uk/vista/ConsentPromptBehavior.htm
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 5
Set by Admin - Related to UAC (User Account Control)
http://www.computerperformance.co.uk/vista/user_account_control.htm#Latest_Method_for_Vista_-_Local_Policy
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorUser = 3
Set by Admin - Related to UAC (User Account Control)
http://www.computerperformance.co.uk/vista/user_account_control.htm#Latest_Method_for_Vista_-_Local_Policy
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: BindDirectlyToPropertySetStorage = 0
Content Indexer service
http://support.microsoft.com/kb/947265
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
Add this setting to the registry to stop unauthorized users from locking machines from the Windows Security dialog box. Value Data: (0 = disabled, 1 = enabled)
http://www.pctools.com/guides/registry/detail/264/
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
System Icons Greyed Out. May have been set by a Virus, or and IT Administrator.
http://windows7themes.net/system-icons-greyed-out-in-windows-7.html
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
The default is 1 (0x1)
http://www.malwareteks.com/NoAutoRuns.php
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
When you create a shortcut to a resource on a mapped network drive, and then remap the same drive to a different network resource, Windows attempts to connect to the original network resource when you access the shortcut. 0 = disabled. May have been
http://www.pctools.com/guides/registry/detail/230/
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
Disabling Automatic Network Shortcut Resolution
http://www.pc1news.com/disabling-automatic-network-shortcut-resolution-230.html
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
Prevents change to active desktop settings. May have been set by an IT Administrator.
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
0 = disable restriction
http://www.pctools.com/guides/registry/detail/541
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
Restrict Changes to Active Desktop Settings - May have seen set by an IT Administrator
http://www.pctools.com/guides/registry/detail/541
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAutorun = 1
No Autorun prevents a USB storage device from auto-running and some other programs also.
http://www.portablefreeware.com/index.php?id=2012
Windows ALL; discovered by nasdaq
(L) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
When you click Start Menu, the Turn Off Computer option may be missing. This is due to a group policy / registry restriction. To restore the missing option, try this - for stand-alone systems. Default value = 0
http://windowsxp.mvps.org/noclose.htm
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
This setting allows you to access to the Control Panel options and settings. May have been set by an administrator.
http://www.pctools.com/guides/registry/detail/543/
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0
Default value.
http://www.pctools.com/guides/registry/detail/1217/
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0
Sets the Distributed File System Tab.
http://www.pctools.com/guides/registry/detail/1095
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
Using Group Policy Objects to hide specified drives. May have been set by an Administrator. Hides all drives
http://support.microsoft.com/kb/231289
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun- = 0
Using Group Policy Objects to hide specified drives. May have been set by an Administrator.
http://support.microsoft.com/kb/231289
Windows ALL; discovered by nasdaq
(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
All drives appear in Windows explorer.
http://technet.microsoft.com/en-us/library/cc938267.aspx
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.