View MDO database (CHR)

Showing entries 4476 to 4500 of 4758.

Go directly to page: 1 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 191

(X) CHR HKCU\...\Chrome\Extension: [nchpfiddbhbdnagofhkjlaiaejmkdcla] - C:\Users\Giacomo\AppData\Local\Temp\nchpfiddbhbdnagofhkjlaiaejmkdcla.crx [2012-11-28]
Adware:Win32/Lollipop
http://www.enigmasoftware.com/adwarewin32lollipop-removal/
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [ndgonipadfipmlmdfofnjnhhlgojnjdn] - C:\Users\marco\AppData\Local\CRE\ndgonipadfipmlmdfofnjnhhlgojnjdn.crx [2012-12-21]
PUP.Optional.Conduit
http://www.herdprotect.com/ndgonipadfipmlmdfofnjnhhlgojnjdn.crx-15c6c30fee8aeca235da57e29942f18183e74da0.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [ndlegeeaeejpodkbnkkofpjpjeigcopp] - C:\Users\OWNER\AppData\Local\CRE\ndlegeeaeejpodkbnkkofpjpjeigcopp.crx [2013-08-09]
PUP.Conduit - MixiDJ V1
http://www.herdprotect.com/ndlegeeaeejpodkbnkkofpjpjeigcopp.crx-472fbda89b6d52e35ec26cc1a7639539e6cd845e.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-05-03]
DVDVideoSoft Toolbar - a Conduit "Community Toolbar
http://www.systemlookup.com/search.php?type=name&client=malwaresearch-chrome&search=dvdvideosoft
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [npiecjlhkngdinoeekmccdbjdgclmnbk] - C:\Users\?????\AppData\Local\CRE\npiecjlhkngdinoeekmccdbjdgclmnbk.crx [2013-11-20]
PUP.Optional.uTorrenToolBar.A
http://www.systemlookup.com/search.php?type=name&client=malwaresearch-chrome&search=TorrentBar
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [ocoombckbcnabpaghmokhaapnbngahck] - C:\Users\Lilo~\AppData\Local\CRE\ocoombckbcnabpaghmokhaapnbngahck.crx [2012-11-13]
Adware.WhiteSmoke.1299
http://www.herdprotect.com/ocoombckbcnabpaghmokhaapnbngahck.crx-b4478e55b5d808d335f6d3368af9a9b7bd058790.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [odiaflgoglmdpognebeehehkabaclnpb] - C:\Users\hp\AppData\Local\CRE\odiaflgoglmdpognebeehehkabaclnpb.crx [2012-09-20]
PUP.Optional.Conduit
http://www.malwareremovalguides.info/pup-optional-conduit-removal-intructions/
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [opfedmikikmahmpaimpfelmikhaigobp] - C:\Users\JR\AppData\Local\CRE\opfedmikikmahmpaimpfelmikhaigobp.crx [2013-11-21]
PUP.Conduit.
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Dener\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-04-17]
http://www.systemlookup.com/CLSID/74052-tbuTor_dll_tbuTo0_dll_tbuTo1_dll_tbuTo2_dll_prxtbuTor_dll_prxtbuTo0_dll_prxtbuTo1_dll_prxtbuTo2_dll_prxtbuTo3_dll.html
a Conduit "Community Toolbar" - redirects searches to search.conduit.com.
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files (x86)\Amazon\ABB\AmazonChrome-bds-amzn.crx [2013-03-21]
Detected by SpyBot S&D as "IronInstall.Toolbar.Amazon" Read the remarks.
https://chrome.google.com/webstore/detail/amazon-assistant-for-chro/pbjikboenpfhbbejgkoklgkhjpfogcam?hl=en
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [pcajpdcjfekhfnapaiphaecoajeollnc] - C:\Users\mreimers\AppData\Local\CRE\pcajpdcjfekhfnapaiphaecoajeollnc.crx [2013-12-12]
PUP.Optional.Conduit
http://www.herdprotect.com/pcajpdcjfekhfnapaiphaecoajeollnc.crx-94877c8a1ebf79e5abed74268f943ff7a8e35e8e.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [pkmpcdbgnfjfeelcpebpkflcmbkclfho] - C:\Users\Marissa The Gr8\AppData\Local\CRE\pkmpcdbgnfjfeelcpebpkflcmbkclfho.crx [2013-07-29]
PUP.Optional.Conduit
http://www.securitystronghold.com/gates/remove-divx-toolbar.html
Windows ALL; discovered by Nasdaq

(X) CHR HKCU\...\Chrome\Extension: [pnjnnnhampgflieglcelomcofocioegp] - C:\Users\Amora\AppData\Local\CRE\pnjnnnhampgflieglcelomcofocioegp.crx [2013-03-27]
Conduit toolbars are reputed to have a certain trackware functionality.
http://greatis.com/blog/how-to-remove-malware/pnjnnnhampgflieglcelomcofocioegp.htm
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32...ChromeExtension: [hacjidbllfnlecmikihhjphlicpbepih] - C:Program Files (x86)Strongvault Online BackupDropPad.crx [2013-03-21]
PUP.215Apps
http://www.systemlookup.com/search.php?type=name&client=malwaresearch-chrome&search=Strongvaul
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32...ChromeExtension: [iofmibpjgjjfhliohjkfgndkjliadbje] - C:Program Files (x86)Zen Dealsapp.crx [2012-11-11]
Adware
http://www.enigmasoftware.com/zendeals-removal/
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32...ChromeExtension: [ohlfohjgijhjlpidbbnmcdooegafnnnm] - C:Program Files (x86)SockshareDownloaderSockshareDownloader10.crx [2012-11-16]
Win32/Adware.1ClickDownload.AO application
http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=4577174#none
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaaahaeginbdcckocjkhbciadcafnep] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahaeginbdcckocjkhbciadcafnep.crx [2014-07-31]
AskPartnerNetwork - Ask Browser hijacker
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx []
Ask.com Toolbar, bundled with many third party applications
http://www.herdprotect.com/aaaaaiabcopkplhgaedhbloeejhhankf.crx-22451cd0a70dd33b4d2cfd70117511aac3c27b45.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaanijiojpcccpkjdjjmjghddcgcbfj] - C:\Users\Smurfs\AppData\Local\APN\GoogleCRXs\aaaanijiojpcccpkjdjjmjghddcgcbfj_7.17.1.0.crx [2012-11-28]
Oovoo Toolbar from ask.com
http://www.herdprotect.com/manifest.json-690be896f7ccbc3e8c23a9b6e037f5aad03f312e.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaanobhlcpfoihhejhjhpcclemfaocd] - C:\Users\Jim McCoy\AppData\Local\APN\GoogleCRXs\aaaanobhlcpfoihhejhjhpcclemfaocd_7.15.2.0.crx
PUP.Ask.ChromePlugin
https://www.reasoncoresecurity.com/manifest.json-b6e32b2d40046b0888e73e8cc97145fae294a697.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaanpaddaaoffccehffldolecpkgpej] - C:\Users\Kris\AppData\Local\APN\GoogleCRXs\aaaanpaddaaoffccehffldolecpkgpej_7.14.1.0.crx [2012-03-04]
Adware
http://forums.anvisoft.com/viewtopic-57-19481-0.html
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Acer\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [2013-01-21]
APN registry access plugin - Related to ASK.COM
https://www.reasoncoresecurity.com/lifecycle.js-860524a3ff52835a40d88782c9c4de6189c8d3d2.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\Users\Balut\AppData\Local\APN\GoogleCRXs\apnorjtoolbar.crx [2014-02-08]
Related to Ask.com - AdWare, PUP (Potentially Unwanted Program) installed on your computer.
http://www.systemlookup.com/FF_Extensions/266-toolbar_ask_com.html
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaaonkdgfnbiijefodhhpdilffkbbmg] - C:\Users\Barry\AppData\Local\APN\GoogleCRXs\aaaaonkdgfnbiijefodhhpdilffkbbmg_7.15.4.0.crx
PUP.Ask.ChromePlugin
https://www.reasoncoresecurity.com/manifest.json-832b807bebdd89e90d59bc03a0ea4d90529f107a.aspx
Windows ALL; discovered by Nasdaq

(X) CHR HKLM-x32\...\Chrome\Extension: [aaaapkimjglpminbnhcedkcegkenknhn] - C:\Users\Big Daddy\AppData\Local\APN\GoogleCRXs\aaaapkimjglpminbnhcedkcegkenknhn_7.14.1.0.crx [2012-02-26]
PUP.Ask.ChromePlugin.j
http://www.herdprotect.com/aaaapkimjglpminbnhcedkcegkenknhn_7.14.1.0.crx-7ccde900b7b3a896c72f283ccac41a53a8852450.aspx
Windows ALL; discovered by Nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.