View MDO database (ALL)
Showing entries 251 to 275 of 18235.
Go directly to page: 1 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 730
(X) C:\a\internetport3.exe Trojan.Downloader.gen.h http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=8691048#none Windows ALL; discovered by Nasdaq |
(X) C:\a\wincheckfe.exe Troj/Agent-ANJJ https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Agent-ANJJ/detailed-analysis.aspx Windows ALL; discovered by Nasdaq |
(N) C:\Brother\BPRSP\resources\BrSupSsp.exe Brother Product Research and Support Program (BPRSP) http://www.brother.com/product/productresearch/usa/ Windows ALL; discovered by Nasdaq |
(X) c:\defender20.exe Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc... Fix / Info: Use Metallica's BFU script: alcanshorty.bfu - Canned speech at the URL Below. http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996 Windows ALL; discovered by nasdaq |
(X) C:\defender25.exe Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc... Fix / Info: To remove use Metallica's "Brute Force Uninstaller" with the "ALCANshorty.BFU" file. http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996 Windows ALL; discovered by nasdaq |
(X) C:\defender26.exe Identified by S!ri's as a Smithfraud infection. Fix / Info: Delete the file and run the removal tool. http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875 Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\Administrator\Application Data\eiofax.exe Troj/Inject-LR Fix / Info: Delete the eiofax.exe file http://www.sophos.com/security/analyses/viruses-and-spyware/trojinjectlr.html Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\Admin\Application Data\Microsoft\svchost.exe Backdoor:Win32/Cycbot.A http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3AWin32%2FCycbot.A Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\Admin\Application Data\Microsoft\Windows\shell.exe Backdoor:Win32/Cycbot.A http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3AWin32%2FCycbot.A Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\All Users\Application Data\6DSS92c31Apgjk.exe Trojan.Agent/Gen-RogueAS http://www.superantispyware.com/malwarefiles/6DSS92C31APGJK.EXE.html Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\All Users\Application Data\AVG April 2013 Campaign\AVG-Secure-Search-Update.exe Adware http://dottech.org/101609/avg-secure-search-toolbar-is-malware/ Windows ALL; discovered by Nasdaq |
(O) C:\Documents and Settings\All Users\Application Data\Easybits GO\EasyBitsGO.exe If you have Spyke this program may install without your consent. Fix / Info: Instruction how to remove on the link. http://www.ghacks.net/2011/05/29/how-to-uninstall-easybits-go-easybitsgo-exe-completely/ Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\All Users\Application Data\P1kAlMiG2Kb7Fz.exe Trojan-Dropper.Win32.FrauDrop.crm http://www.virustotal.com/file-scan/report.html?id=15114e846b05a533188f2d10c0a4a0c40058cd59419ffd8ca88465d30a48b822-1311321646 Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer117.exe Identified as Adware.QueryExplorer by Malwarebytes. http://www.prevx.com/filenames/X1400852951149403665-X1/QUERYEXPLORER.EXE.html Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\All Users\Application Data\ScanQuery\scanquery118.exe Adware-OneStep.l!7C06FCB3854F http://vil.nai.com/vil/content/v_444189.htm Windows ALL; discovered by nasdaq |
(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll Module - Reported by an OTL log. Windows ALL; discovered by nasdaq |
(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll Module - Reported by an OTL log. Windows ALL; discovered by Nasdaq |
(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll Module - Reported by an OTL log. Windows ALL; discovered by nasdaq |
(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL Module - Reported by an OTL log. Windows ALL; discovered by nasdaq |
(O) C:\Documents and Settings\All Users\Application Data\WeCareReminder\ReminderHelper.exe We-Care Reminder browser plugin http://www.systemlookup.com/CLSID/67429-IEHelperv2_5_0_dll.html Windows ALL; discovered by nasdaq |
(U) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\GetRight.lnk Shortcut to program Windows ALL; discovered by Nasdaq |
(X) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\palstart.exe PalTalk is an IM client that is advertising supported. Fix / Info: Delete File. http://www.superadblocker.com/definition/palstart/ Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\qwwyyu.exe Added by a variant of the SmitFraud infection. Fix / Info: Use S!Ri's smitfraudfix tool. http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875 Windows ALL; discovered by nasdaq |
(X) c:\documents and settings\all users\startup\skunk.exe W32/Sunk-A will attempt to replace every file on the infected computer that has the extension EXE with a copy of itself. The worm will also copy itself to folders known to be used by popular Peer-To-Peer programs using various names. http://www.sophos.com/virusinfo/analyses/w32sunka.html Windows ALL; discovered by nasdaq |
(X) C:\Documents and Settings\Christopher\Application Data\SpeedTray\speedtray.exe In most cases PC Power Speed gets inside the system in a bundle with other programs. That is why it was categorized as Potentially Unwanted Program. http://www.lavasoft.com/mylavasoft/company/blog/how-to-remove-pc-power-speed Windows ALL; discovered by Nasdaq |
This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended
to complement other legitimate online lists.