View all database entries

ALL  PP  F0  F1  F2  F3  R0  R1  N1  N2  N3  N4  O1  O2  O3  O4  O5  O6  O7  O8  
O9  O10  O11  O12  O13  O14  O15  O16  O17  O18  O19  O20  O21  O22  O23  CHR  FF  

View MDO database (PP)

Showing entries 2626 to 2650 of 3051.

Go directly to page: 1  99  100  101  102  103  104  105  106  107  108  109  110  111  112  113  123

(X) C:\Windows\system32\Drivers\wfcre.sys
PUP.Optional.EnjoyWiFi
Fix / Info: Malwarebytes
https://forums.malwarebytes.com/topic/211535-removal-instructions-for-enjoywifi/
Windows ALL; discovered by Nasdaq
(X) C:\Windows\system32\Drivers\WinDivert64.sys
Adware.RunBooster
Fix / Info: Malwarebytes
https://forums.malwarebytes.com/topic/195802-removal-instructions-for-runbooster/
Windows ALL; discovered by Nasdaq
(X) C:\Windows\system32\Drivers\WinmonFS.sys
Unidentify malware.
https://greatis.com/appdata/d/SysDir/d/drivers_winmonfs.sys.htm
Windows ALL; discovered by Nasdaq
(X) C:\Windows\system32\Drivers\WinmonFS.sys
Unidentify malware.
https://greatis.com/appdata/d/SysDir/d/drivers_winmonfs.sys.htm
Windows ALL; discovered by Nasdaq
(X) C:\WINDOWS\system32\Drivers\zdwfp64.sys
PUP.Optional.Komodia
Fix / Info: Malwarebytes
https://forums.malwarebytes.com/topic/195326-removal-instructions-for-other-search-4/
Windows ALL; discovered by Nasdaq
(X) C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}gw.sys
Adware - Belongs to the Sambreel/Yontoo progam that inserts various forms of advertising in the user's web browser, installed with minimal or no user consent.
http://www.herdprotect.com/9edd0ea8-2819-47c2-8320-b007d5996f8agw.sys-b9a1f121047d2134c541a78d10f4969cb8b59177.aspx
Windows ALL; discovered by Nasdaq
(X) C:\windows\system32\dwdsregt.exe
Added by Adware.ZenoSearch
Fix / Info: HijackThis - AdAware tool
http://sarc.com/avcenter/venc/data/adware.zenosearch.html
Windows ALL; discovered by nasdaq
(L) C:\WINDOWS\system32\dxmasf.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq
(X) C:\WINDOWS\system32\eetu.exe
Not defined - This application may exhibit the features of adware, spyware, or both.
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www.superadblocker.com/definition/eetu/
Windows ALL; discovered by nasdaq
(L) C:\WINDOWS\SYSTEM32\efsext.dll
Microsoft
http://windows10dll.nirsoft.net/efsext_dll.html
Windows ALL; discovered by Nasdaq
(X) C:\Windows\System32\ExecUser.exe
Trojan.RBot/Variant.Process
Fix / Info: Delete file.
http://www.fileresearchcenter.com/W/WINPWDHELPER.EXE-6609.html
Windows ALL; discovered by nasdaq
(X) C:\WINDOWS\System32\gah95on6.exe
An advertising program by EliteBar.
Fix / Info: HijackThis, delete file, AwAware tool
http://www.liutilities.com/products/wintaskspro/processlibrary/gah95on6/
Windows ALL; discovered by nasdaq
(X) C:\WINDOWS\system32\grdmgr.exe
Trojan Downloader
Fix / Info: Stop the process, delete the file
http://fileinfo.prevx.com/adware/qqb4b439508919-GRDM24018589/GRDMGR.EXE.html
Windows ALL; discovered by nasdaq
(O) C:\Windows\System32\GroupPolicyUsers\Numlock.vbs
This is a valid program, but it is up to you whether or not you want it to run on startup.
https://www.bleepingcomputer.com/startups/numlock.vbs-18077.html
Windows ALL; discovered by Nasdaq
(X) C:\Windows\System32\GWX\GWX.exe
Obsoleter Get Windows X (10)
http://www.zdnet.com/article/get-windows-10-microsofts-hidden-roadmap-for-the-biggest-software-upgrade-in-history/
Windows ALL; discovered by Nasdaq
(Q) C:\Windows\System32\GWX\GWXUX.exe
GWX stands for Get Windows X (10). Decide if you wan it.
http://www.zdnet.com/article/get-windows-10-microsofts-hidden-roadmap-for-the-biggest-software-upgrade-in-history/
Windows ALL; discovered by Nasdaq
(X) C:\windows\system32\hgfedcba.exe
Uncategorized malware threat process. Contains missing/deceptive version information and no company information.
Fix / Info: HijackThis - AdAware tool
http://www.superadblocker.com/H/HGFEDCBA.EXE-4718.html
Windows ALL; discovered by nasdaq
(X) C:\WINDOWS\system32\hhs32.pif
Added by the Worm: WORM_RBOT.CFR
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www.trendmicro-middleeast.com/enterprise/vinfo/encyclopedia.php?LYstr=VMAINDATA&vNav=3&VName=WORM_RBOT.CFR
Windows ALL; discovered by nasdaq
(L) C:\Windows\System32\HP1100LM.DLL
Marvell Printer Language Monitor
http://www.herdprotect.com/hp1100lm.dll-026c916e8432253edd99bd1ed388e2667ce3a40b.aspx
Windows ALL; discovered by Nasdaq
(L) C:\WINDOWS\system32\HPBHEALR.DLL
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq
(L) C:\WINDOWS\system32\hpbprtmon.dll
Port Monitor Server DLL
https://www.freefixer.com/library/file/hpbprtmon.dll-90735/
Windows ALL; discovered by Nasdaq
(L) C:\Windows\system32\hpinkstsC211LM.dll
HP Digital Imaging
https://www.freefixer.com/library/file/hpinkstsC211LM.dll-184124/
Windows ALL; discovered by Nasdaq
(L) C:\Windows\system32\hpinkstsE111LM.dll
Print Status Language Monitor
https://www.freefixer.com/library/file/hpinkstsE111LM.dll-285234/
Windows ALL; discovered by Nasdaq
(L) C:\Windows\System32\IccLibDll.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq
(L) C:\Windows\System32\IccLibDll_x64.dll
Used by many manufacturers.
http://www.herdprotect.com/icclibdll_x64.dll-8619dc433cc32316702f78a1572fc1c4b2838f5c.aspx
Windows ALL; discovered by Nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.