View MDO database (O4)

Showing entries 1 to 25 of 167.

Go directly to page: 1 2 3 4 5 6 7

(X) O4 - Global Startup: .protected
Identified by S!ri's as a Smithfraud infection.
Fix / Info: Delete the file and run the removal tool.
http://www.spywareinfoforum.com/index.php?showtopic=72875
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: JVM0.exe
Added by a variant of the Rbot familly of trojan.
Fix / Info: Use Andy manchesta's SDFix tool
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: KVG.exe
Added by Trojan.Downloader.Delf.AM
Fix / Info: HijackThis
http://virusinfo.prevx.com/pxparall.asp?PXC=936410829209
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: MS_update_0610_KB72306.exe
Added by a Trojan-Clicker TROJAN
Fix / Info: Use Andy manchesta's SDFix tool
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: MS_update_0612_KB74062.exe
Added by a variant of the Rbot familly of trojan.
Fix / Info: Use Andy manchesta's SDFix tool
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: MS_update_0704_KB74073.exe
Added by a variant of the Trojan.UpdateKB
Fix / Info: Use Andy manchesta's SDFix tool.
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: palstart.exe
PalTalk is an IM client that is advertising supported.
Fix / Info: HijackThis - AdAware tool
http://www.superadblocker.com/definition/palstart/
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: PGPtray.exe.lnk = ?
Required and set by the application
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: Photags AutoDetect.lnk = C:\Program Files\PhoTags Express\Photags AutoDetect.exe
Required and set by the application
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: PlexTools Professional.lnk = C:\Program Files\Plextor\PlexTool.exe
Required and set by the application
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: PopMenu exe.lnk = C:\Program Files\WinBatch\System\popmenu.exe
Required and set by the application
Windows ALL; discovered by nasdaq

(U) O4 - Global Startup: Post-itR Software Notes Lite.lnk
Related to Post-it from 3M
http://www.3m.com/
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: RF Keyboard&Mouse Program.lnk =
Related to SAMSUNG Wireless mouse.
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: RtlWake.lnk = ?
Related to Belkin Wireless Network Monitor
http://www.belkin.com/
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: SJphone.lnk = ?
Set by user
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: Skunk.exe
W32/Sunk-A will attempt to replace every file on the infected computer that has the extension EXE with a copy of itself. The worm will also copy itself to folders known to be used by popular Peer-To-Peer programs using various names.
http://www.sophos.com/virusinfo/analyses/w32sunka.html
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: SmartEnforcer.lnk = C:\Program Files\Perfigo\SmartEnforcer\SmartEnforcer.exe
Previously by Perfigo, now owned by Cisco Corp.
http://www.cisco.com/
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: SpamWeed.lnk = C:\Program Files\SpamWeed\spamweed.exe
SPAM filter from Lanfei Co. Ltd.
http://www.spamweed.com/
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: Start 3DxWare.lnk = C:\Program Files\3Dconnexion\3Dconnexion 3DxWare\3DxSrv.exe
This Process should be running when Spaceball Mouse is installed.
http://www.file.net/process/3dxsrv.exe.html
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: Start HTML Search Server.lnk = C:\SQLLIB\bin\db2nq.exe
HTML search engine installed with IBMs DB2 client.
http://www.windowsstartup.com/wso/browse.php?l=4&start=25&end=50
Windows ALL; discovered by nasdaq

(X) O4 - Global Startup: svchost.exe
Added by a variant of the Rbot familly of trojan.
Fix / Info: Use Andy manchesta's SDFix tool
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: Telkom ADSL.lnk = ?
Related to TelCom ADSL I.P.
http://www.telkom.co.za/
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: Unwired Launchpad.lnk = C:\Program Files\Unwired\UwSCT.exe
Required and set by the application
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: Verizon Online Dialer.lnk = C:\Program Files\Common Files\Verizon Online\ConnMgr\Verizon Online.exe
Related to Verizon Internet Provider.
Windows ALL; discovered by nasdaq

(L) O4 - Global Startup: Verizon Support Service.lnk = ?
Required and set by the application
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.