View MDO database (PP)

Showing entries 3026 to 3050 of 3051.

Go directly to page: 1 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123

(X) C:\WINNT\System32\sysmonnt.exe
Common spyware which goes by the name Msavc32 vx2
Fix / Info: Delete File - Trojan/Virus scan.
http://www.processlibrary.com/directory/files/sysmonnt/
Windows ALL; discovered by nasdaq

(X) C:\WINNT\system32\System Monitor\Sensoer.exe
Unknown malware see URL
Fix / Info: Delete folder
http://spywareinfoforum.com/index.php?act=ST&f=18&t=53275
Windows ALL; discovered by nasdaq

(X) C:\WINNT\system32\System Monitor\svchost.exe
Unknown malware see URL
Fix / Info: Delete folder
http://spywareinfoforum.com/index.php?act=ST&f=18&t=53275
Windows ALL; discovered by nasdaq

(X) C:\WINNT\system32\vmst32.exe
Added by a variant of the Rbot familly of trojan.
Fix / Info: Use Andy manchesta's SDFix tool
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(X) C:\WINNT\system32\vp1i4.exe
Known Dialer
Fix / Info: Use Brute Force Uninstaller (BFU) with Metallica's alcanshorty.bfu fix.
http://metallica.geekstogo.com/dialers.html
Windows ALL; discovered by nasdaq

(X) C:\WINNT\system32\wfxqhv.exe
Known Dialer
Fix / Info: Use Brute Force Uninstaller (BFU) with Metallica's alcanshorty.bfu fix.
http://metallica.geekstogo.com/dialers.html
Windows ALL; discovered by nasdaq

(X) C:\WINNT\system32\win32GI\svchost.exe
Added by a variant of the Rbot familly of trojan.
Fix / Info: Use Andy manchesta's SDFix tool
http://spywareinfoforum.com/index.php?act=ST&f=37&t=81454
Windows ALL; discovered by nasdaq

(X) C:\WINNT\System32\wins.exe
W32.HLLW.Discoball is a worm that spreads through network shares. A sign of a possible infection is the existence of Mdbole.exe, Seg32.exe, or Wins.exe.
Fix / Info: HJT and Virus removal programs.
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.discoball.html
Windows ALL; discovered by Nasdaq

(X) C:\WINNT\System32\WinSyswal32.exe
CWS Spyware!!
Fix / Info: Task Manager, HijackThis, CWShredder, etc. may also require special tools yet to be developed
http://www.spywareinfoforum.info/newsletter/archives/2005/aug7.php
Windows ALL; discovered by Basementgeek

(X) C:\WINNT\system32\zqskw.exe
Known Dialer
Fix / Info: Use Brute Force Uninstaller (BFU) with Metallica's alcanshorty.bfu fix.
http://metallica.geekstogo.com/dialers.html
Windows ALL; discovered by nasdaq

(X) C:\WINNT\tool2.exe
Added by the Smitfraud family of trojans!
Fix / Info: Delete file - Remove Smitfraud infection.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

(X) C:\WINNT\z00098.exe
Trojan.Chameleon.Process appears under the Windows folder as a randomly named file
Fix / Info: Delete File - Trojan/Virus scan.
http://www.superadblocker.com/definition/z00098/
Windows ALL; discovered by nasdaq

(X) C:\\ProgramData\\WindowsVideoErrorReporting\\wvermgr.exe
Win32:Adware-gen [Adw]
http://www.freefixer.com/library/file/wvermgr.exe-267906/
Windows ALL; discovered by Nasdaq

(L) C:\\system32\mqsvc.exe
Microsoft Message Queuing technology enables apps running at different times
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/mqsvc
Windows ALL; discovered by Nasdaq

(U) D:\Games\Dragon Age Inquisition\DragonAgeInquisition.exe
Game from Electronic Arts Inc.
https://www.ea.com/games/dragon-age
Windows ALL; discovered by Nasdaq

(L) D:\Installer Games\Multiplayer\ASF\plugins\ArchiSteamFarm.OfficialPlugins.SteamTokenDumper\ArchiSteamFarm.OfficialPlugins.SteamTokenDumper.dll
application with primary purpose of idling Steam cards from multiple accounts simultaneously.
https://github.com/JustArchiNET/ArchiSteamFarm
Windows ALL; discovered by Nasdaq

(L) D:\Program Files\AVAST Software\Avast\ashShA64.dll
avast! Shell Extension
http://www.shouldiblockit.com/ashsha64.dll-6609.aspx
Windows ALL; discovered by Nasdaq

(U) D:\Programs\Viddly YouTube Downloader\luminati\net_svc.exe
Luminati SDK Engine
https://www.freefixer.com/library/file/net_svc.exe-286106/
Windows ALL; discovered by Nasdaq

(U) D:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SX Virtual Link.lnk
Shortcut to program - Connect.exe
https://www.silextechnology.com/
Windows ALL; discovered by Nasdaq

(X) D:\WINNT\system32\pkpzkr.exe
Narrator infection.
Fix / Info: Follow the removal instructions in the URL listed below if you have access to it.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=42076
Windows ALL; discovered by nasdaq

(L) E:\Dropbox\GLH Download\One Touch Verio IQ\onetouchsetup.exe
OneTouch Software from LifeScan
https://www.herdprotect.com/onetouchsetup.exe-2bd8d27b187c1e08f11b35d4043855e88ad05387.aspx
Windows ALL; discovered by Nasdaq

(L) E:\eFilmLt.exe
eFilm Workstation - MERGE Healthcare
http://www.herdprotect.com/efilmlt.exe-12754efb13ec42024e8ed15ecc1142b234d57b38.aspx
Windows ALL; discovered by Nasdaq

(L) F:\Driver\NvtlDriverCDFilter_V2.02.11.001.exe
Novatel Wireless mobile broadband
http://www.isthisfilesafe.com/sha1/69D0DD04469A8EDCDC5EDCECAEDC132BE4F0086C_details.aspx
Windows ALL; discovered by Nasdaq

(U) G:\Sony\Super Smash Bros Brawl [USA] [Wii] [English] [Torrentmas.Com]\Project M 3.5 ISO Builder\dolphin-master-4.0-7161-x64\Dolphin-x64\Dolphin.exe
Nintendo Game - Super Smash Bros Brawl
http://www.smashbros.com/
Windows ALL; discovered by Nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.