View all database entries

ALL  PP  F0  F1  F2  F3  R0  R1  N1  N2  N3  N4  O1  O2  O3  O4  O5  O6  O7  O8  
O9  O10  O11  O12  O13  O14  O15  O16  O17  O18  O19  O20  O21  O22  O23  CHR  FF  

View MDO database (O7)

Showing entries 1 to 25 of 89.

Go directly to page: 1  2  3  4  

(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 0
Disable = 0 May have been set by an administrator.
http://www.computerperformance.co.uk/windows7/windows7_autoplay.htm
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
Forcing Windows to Use the Classic Desktop - (0 = Default,
http://www.pc1news.com/forcing-windows-to-use-the-classic-desktop-958.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1
This setting will clear the list of recent documents on the Start Menu when Windows exits.
http://www.pc1news.com/how-to-clear-recent-documents-when-windows-exits-546.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableThumbnailsOnNetworkFolders = 1
If you disable the Thumbnail Display of Network Folders then you will get to see the icons instead of Thumbnail Display on Network Folders. - May have been set by an IT administator.
http://www.itechtalk.com/thread5246.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0
Logoff on the Start Menu
http://www.pc1news.com/forcing-logoff-on-the-start-menu-1046.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: GreyMSIAds = 0
Highlight Missing Windows Installer Programs on the Start Menu - Default value is 1.
http://www.pctools.com/guides/registry/detail/1296/
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCABattery = 1
Remove the battery meter icon that is displayed in the system notification area (previously called the “system tray”).
http://jalaj.net/2007/11/28/tweaking-registry-for-task-bar-in-vista/
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
System Icons Greyed Out. May have been set by a Virus, or and IT Administrator.
http://windows7themes.net/system-icons-greyed-out-in-windows-7.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAVolume = 0
The function of this setting is to control if users are asked to press Ctrl + Alt + Delete as a security precaution before they log into the system. 1 = Disable
http://www.pc1news.com/requiring-users-to-press-ctrl-alt-delete-before-logon-971.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
When you create a shortcut to a resource on a mapped network drive, and then remap the same drive to a different network resource, Windows attempts to connect to the original network resource when you access the shortcut. 0 (zero) = Disabled
http://www.pctools.com/guides/registry/detail/230/
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
When you create a shortcut to a resource on a mapped network drive, and then remap the same drive to a different network resource, Windows attempts to connect to the original network resource when you access the shortcut. 1 = Enabled
http://www.pctools.com/guides/registry/detail/230/
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0
Active Desktop Settings - 0 = disable restriction,
http://www.pc1news.com/disabling-active-desktop-508.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
Removing the Option to Change or Hide Toolbars - 0 = default.
http://www.pc1news.com/removing-the-option-to-change-or-hide-toolbars-640.html
Windows ALL; discovered by nasdaq
(O) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 1
Removing the Option to Change or Hide Toolbars. May have been set my an Administrator.
http://www.pc1news.com/removing-the-option-to-change-or-hide-toolbars-640.html
Windows ALL; discovered by nasdaq
(L) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
When you click Start Menu, the Turn Off Computer option may be missing. This is due to a group policy / registry restriction. To restore the missing option, try this - for stand-alone systems. Default value = 0
http://windowsxp.mvps.org/noclose.htm
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCloseDragDropBands = 0
Active Desktop Restrictions - 0 = disable restriction
http://www.pc1news.com/active-desktop-restrictions-443.html
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
emoves the Desktop Cleanup Wizard.
http://technet.microsoft.com/en-us/library/cc737364%28WS.10%29.aspx
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0
Default value.
http://www.pctools.com/guides/registry/detail/1217/
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0
Sets the Distributed File System Tab.
http://www.pctools.com/guides/registry/detail/1095
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
Using Group Policy Objects to hide specified drives. May have been set by an Administrator.
http://support.microsoft.com/kb/231289
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
Using Group Policy Objects to hide specified drives. May have been set by an Administrator. Hides all drives
http://support.microsoft.com/kb/231289
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
All drives appear in Windows explorer.
http://technet.microsoft.com/en-us/library/cc938267.aspx
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
Disable = 0 May have been set by an administrator.
http://www.computerperformance.co.uk/windows7/windows7_autoplay.htm
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 124
You calculate the figure by summing: the hex values
http://www.computerperformance.co.uk/windows7/windows7_autoplay.htm
Windows ALL; discovered by nasdaq
(Q) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
In Windows 7, the default value for NoDriveTypeAutoRun is 0x91 (145). You calculate the figure by summing: 0x1 (unknown types), 0x80 (unknown types) and 0x10 (network drives).
http://www.computerperformance.co.uk/windows7/windows7_autoplay.htm
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.