View MDO database (R0)

Showing entries 1 to 25 of 1035.

Go directly to page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 42

(U) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = google.net-studio.org
Set by user
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://81.222.131.49/index.php
Troj/StartPa-GB is a Windows Trojan which alters default Internet Explorer settings.
Fix / Info: HJT and Virus/trojan removal programs.
http://www.sophos.com/virusinfo/analyses/trojstartpagb.html
Windows ALL; discovered by Nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://angelsfucked.com/se.html
Related to Hotoffers and its variants
Fix / Info: Check removal procedures at URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=43476
Windows ALL; discovered by nasdaq

(U) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://bigpond.com
Set by user
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://spywaresoftstop.com/
Rogue/Suspect software. Aggressive, deceptive advertising
Fix / Info: HijackThis
http://www.spywarewarrior.com/rogue_anti-spyware.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.bestwebslinks.com/
Smitfraud family of trojans
Fix / Info: See removal instructions at the link below.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=52193
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.findyourcouple.com
Related to Hotoffers and its variants
Fix / Info: Check removal procedures at URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=43476
Windows ALL; discovered by nasdaq

(U) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.my.att.net
Set by user
Windows ALL; discovered by nasdaq

(U) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.nuevaq.fm
set by user
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.oneclicksearches.com/
Indicates the "Smitfraud" infection.
Fix / Info: See removal instruction at the link below.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=30
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.qfind.net/
Unknown virus/trojan. Reported by HJTHelper as CWS infection. All logs reviewed on google are deleting this item with success. One reference in the link below.
Fix / Info: HJT, CWShredder tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=46996&hl=qfind.net/
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.quicknavigate.com/
Smitfraud family of trojans
Fix / Info: Fix if you have access: http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=15
http://www.sophos.com/virusinfo/analyses/trojpupere.html
Windows ALL; discovered by Nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.searchmaid.com/
Searchmaid hijacker
Fix / Info: HijackThis
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.searchzoomer.com
Hotoffers and its variants
Fix / Info: See fix at the suggested URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=43476
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.searchzoomer.com/
Related to Hotoffers and its variants
Fix / Info: Check removal procedures at URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=43476
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.security2k.net/
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(U) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.sony.com/vaiopeople
Set by user
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.startsearches.net/
Related to the new Smitfraud family of trojans
Fix / Info: Removal see Topic below
http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=15
Windows ALL; discovered by Nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.updatesearches.com/
Smitfraud family of trojans
Fix / Info: Fix if you have access: http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=15
http://www.sophos.com/virusinfo/analyses/trojpupere.html
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
Adware-WinActive
Fix / Info: HijackThis - AdAware tool
http://vil.nai.com/vil/content/v_125025.htm
Windows ALL; discovered by nasdaq

(U) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = www.uol.com.br
Set by user
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:NavigationFailure
CWS SE dll infection
Fix / Info: See fix at the suggested URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=48493
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
Should always be fixed
Windows ALL; discovered by nasdaq

(X) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Ask.com - International
Ask.com Toolbar, bundled with many third party applications
http://www.systemlookup.com/CLSID/56968-GenericAskToolbar_dll_GENERI_1_DLL.html
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.