View MDO database (PP)

Showing entries 2601 to 2625 of 3051.

Go directly to page: 1 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 123

(L) C:\WINDOWS\system32\dhcpcore.dll
Registers and updates IP addresses and DNS records for this computer.
Fix / Info: Microsoft Corp.
Windows ALL; discovered by Nasdaq

(X) C:\WINDOWS\system32\dial32.exe
The Trojan's network activity can degrade system performance.
Fix / Info: Delete the file - Virus/trojan scan.
http://securityresponse.symantec.com/avcenter/venc/data/downloader.harnig.html
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\system32\dlcxcnv4.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\system32\dlcxdrs.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\system32\DlgSearchEngine.dll
Samsung C48x Series
http://www.helpjet.net/Fs-30325758-65343120-91915201-extract.html
Windows ALL; discovered by Nasdaq

(X) C:\WINDOWS\System32\dlh9jkdq1.exe
Added by TROJ_TIBS.AI TROJAN!
Fix / Info: Delete File - Trojan/Virus scan.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_TIBS.AI&VSect=T
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\System32\dlh9jkdq2.exe
Added by TROJ_TIBS.AI TROJAN!
Fix / Info: Delete File - Trojan/Virus scan.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_TIBS.AI&VSect=T
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\System32\dlh9jkdq5.exe
Added by TROJ_TIBS.AI TROJAN!
Fix / Info: Delete File - Trojan/Virus scan.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_TIBS.AI&VSect=T
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\System32\dlh9jkdq6.exe
Added by TROJ_TIBS.AI TROJAN!
Fix / Info: Delete File - Trojan/Virus scan.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_TIBS.AI&VSect=T
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\System32\dlh9jkdq7.exe
Added by TROJ_TIBS.AI TROJAN!
Fix / Info: Delete File - Trojan/Virus scan.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_TIBS.AI&VSect=T
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\System32\dlh9jkdq8.exe
Added by TROJ_TIBS.AI TROJAN!
Fix / Info: Delete File - Trojan/Virus scan.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_TIBS.AI&VSect=T
Windows ALL; discovered by nasdaq

(Q) C:\WINDOWS\system32\dllcache\svchost.exe
The svchost.exe in the dllcache folder may have been changed by the bifrose trojan, if it shows in the Hijackthis log the legit version from system32 can be copied back to the dllcache folder.
Fix / Info: see the the link below.
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(Q) c:\windows\system32\dllcache\win32\csrss.exe
The good csrss.exe process is in the \system32 folder, could be a virus.
Fix / Info: Check the source or the csrss.exe file, where does it come from
http://www.liutilities.com/products/wintaskspro/processlibrary/csrss/
Windows ALL; discovered by nasdaq

(X) C:\Windows\System32\dload.exe
HorseServer/Haxdoor/WebSiteViewer infection.
Fix / Info: Get this tool. http://www.atribune.org/downloads/HDFix.zip
http://spywareinfoforum.com/index.php?act=ST&f=6&t=41260
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\system32\DLPRMON.DLL
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(X) C:\Windows\system32\dmwu.exe
PUP.Optional.SweetIM
https://forums.malwarebytes.org/topic/182938-removal-instructions-for-bubblehit/
Windows ALL; discovered by Nasdaq

(X) C:\Windows\System32\DnsBlockUpdateSvc.exe
PUP.Optional.DNSBlock
https://forums.malwarebytes.org/topic/185969-removal-instructions-for-dnsblock/
Windows ALL; discovered by Nasdaq

(L) C:\WINDOWS\System32\dnsrslvr.dll
DNS Client service (dnscache) caches Domain Name System.
Fix / Info: Microsoft Corp.
https://www.bleepingcomputer.com/startups/dnsrslvr.dll-25735.html
Windows ALL; discovered by Nasdaq

(L) C:\WINDOWS\system32\dps.dll
Diagnostic Policy Service
Fix / Info: Microsoft Corp.
https://www.bleepingcomputer.com/startups/dps.dll-25737.html
Windows ALL; discovered by Nasdaq

(L) C:\WINDOWS\System32\drivers\monitor.sys
Class Function Driver Service
Fix / Info: Microsoft Corp.
https://www.file.net/process/monitor.sys.html
Windows ALL; discovered by Nasdaq

(L) C:\WINDOWS\System32\drivers\processr.sys
Processor Device Driver
Fix / Info: Microsoft Corp.
https://www.file.net/process/processr.sys.html
Windows ALL; discovered by Nasdaq

(X) C:\WINDOWS\system32\drivers\services.exe
Unidentified malware. Only delete the Services.exe in this folder C:WINDOWSsystem32drivers.
Fix / Info: HijackThis
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\system32\drivers\svchost.exe
Added by a variant of the SmitFraud infection.
Fix / Info: Use S!Ri's smitfraudfix tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\system32\drivers\svchost.exe
Unidentified malware. The operating system svchost.exe file not no located in this \drivers\ folder.
Fix / Info: Delete the file.
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\System32\drivers\volmgr.sys
Volume Manager Driver
Fix / Info: Microsoft Corp.
https://www.file.net/process/volmgr.sys.html
Windows ALL; discovered by Nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.