View MDO database (ALL)

Showing entries 251 to 275 of 18235.

Go directly to page: 1 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 730

(X) C:\a\internetport3.exe
Trojan.Downloader.gen.h
http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=8691048#none
Windows ALL; discovered by Nasdaq

(X) C:\a\wincheckfe.exe
Troj/Agent-ANJJ
https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Agent-ANJJ/detailed-analysis.aspx
Windows ALL; discovered by Nasdaq

(N) C:\Brother\BPRSP\resources\BrSupSsp.exe
Brother Product Research and Support Program (BPRSP)
http://www.brother.com/product/productresearch/usa/
Windows ALL; discovered by Nasdaq

(X) c:\defender20.exe
Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc...
Fix / Info: Use Metallica's BFU script: alcanshorty.bfu - Canned speech at the URL Below.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996
Windows ALL; discovered by nasdaq

(X) C:\defender25.exe
Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc...
Fix / Info: To remove use Metallica's "Brute Force Uninstaller" with the "ALCANshorty.BFU" file.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996
Windows ALL; discovered by nasdaq

(X) C:\defender26.exe
Identified by S!ri's as a Smithfraud infection.
Fix / Info: Delete the file and run the removal tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\Administrator\Application Data\eiofax.exe
Troj/Inject-LR
Fix / Info: Delete the eiofax.exe file
http://www.sophos.com/security/analyses/viruses-and-spyware/trojinjectlr.html
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\Admin\Application Data\Microsoft\svchost.exe
Backdoor:Win32/Cycbot.A
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3AWin32%2FCycbot.A
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\Admin\Application Data\Microsoft\Windows\shell.exe
Backdoor:Win32/Cycbot.A
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3AWin32%2FCycbot.A
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\6DSS92c31Apgjk.exe
Trojan.Agent/Gen-RogueAS
http://www.superantispyware.com/malwarefiles/6DSS92C31APGJK.EXE.html
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\AVG April 2013 Campaign\AVG-Secure-Search-Update.exe
Adware
http://dottech.org/101609/avg-secure-search-toolbar-is-malware/
Windows ALL; discovered by Nasdaq

(O) C:\Documents and Settings\All Users\Application Data\Easybits GO\EasyBitsGO.exe
If you have Spyke this program may install without your consent.
Fix / Info: Instruction how to remove on the link.
http://www.ghacks.net/2011/05/29/how-to-uninstall-easybits-go-easybitsgo-exe-completely/
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\P1kAlMiG2Kb7Fz.exe
Trojan-Dropper.Win32.FrauDrop.crm
http://www.virustotal.com/file-scan/report.html?id=15114e846b05a533188f2d10c0a4a0c40058cd59419ffd8ca88465d30a48b822-1311321646
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer117.exe
Identified as Adware.QueryExplorer by Malwarebytes.
http://www.prevx.com/filenames/X1400852951149403665-X1/QUERYEXPLORER.EXE.html
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\ScanQuery\scanquery118.exe
Adware-OneStep.l!7C06FCB3854F
http://vil.nai.com/vil/content/v_444189.htm
Windows ALL; discovered by nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
Module - Reported by an OTL log.
Windows ALL; discovered by Nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(O) C:\Documents and Settings\All Users\Application Data\WeCareReminder\ReminderHelper.exe
We-Care Reminder browser plugin
http://www.systemlookup.com/CLSID/67429-IEHelperv2_5_0_dll.html
Windows ALL; discovered by nasdaq

(U) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\GetRight.lnk
Shortcut to program
Windows ALL; discovered by Nasdaq

(X) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\palstart.exe
PalTalk is an IM client that is advertising supported.
Fix / Info: Delete File.
http://www.superadblocker.com/definition/palstart/
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\qwwyyu.exe
Added by a variant of the SmitFraud infection.
Fix / Info: Use S!Ri's smitfraudfix tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

(X) c:\documents and settings\all users\startup\skunk.exe
W32/Sunk-A will attempt to replace every file on the infected computer that has the extension EXE with a copy of itself. The worm will also copy itself to folders known to be used by popular Peer-To-Peer programs using various names.
http://www.sophos.com/virusinfo/analyses/w32sunka.html
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\Christopher\Application Data\SpeedTray\speedtray.exe
In most cases PC Power Speed gets inside the system in a bundle with other programs. That is why it was categorized as Potentially Unwanted Program.
http://www.lavasoft.com/mylavasoft/company/blog/how-to-remove-pc-power-speed
Windows ALL; discovered by Nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.