View MDO database (R1)

Showing entries 451 to 475 of 1011.

Go directly to page: 1 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 41

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = searchmiracle.com/sp.php
Bube.d
Fix / Info: Kaspersky anti-virus (30 day trial version if not already present)
http://castlecops.com/postt106277.html
Windows ALL; discovered by Angoid

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = TangoSearch.com
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.orange.fr
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.searchant.com/sp
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = »searchmiracle.com/sp.php
Bube.d
Fix / Info: Kaspersky anti-virus (30 day trial version if not already present)
http://castlecops.com/postt106277.html
Windows ALL; discovered by Angoid

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
AdWare.Win32.Agent.bzo [Kaspersky Lab]
http://www.threatexpert.com/report.aspx?md5=ae83f747de92818619bc9a62f95588da
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:NavigationFailure
CWS infection
Fix / Info: HJT, CWShredder tool.
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://google.icq.com
set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://103.nowfind.biz/pps.php
blocked by this hosts file. Adware NowFind.
Fix / Info: HijackThis, AwAware tool
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://69.50.182.88/?qq=
Trojan.Magise
Fix / Info: HJT and Virus/trojan removal programs.
http://www.sarc.com/avcenter/venc/data/pf/trojan.magise.html
Windows ALL; discovered by Nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://angelsfucked.com/se.html
Related to Hotoffers and its variants
Fix / Info: Check removal procedures at URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=43476
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://balabolka.biz/start.html
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.ca/0SEE...S01?FORM=TOOLBR
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com.br/...S01?FORM=TOOLBR
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://internetsearchservice.com
Added by AntiSpyCheck a Rogue program.
Fix / Info: Hijackthis
http://www.bleepingcomputer.com/malware-removal/antispycheck
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://minisearch.startnow.com/
blocked by this hosts file.
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.juno.com/s...ch?r=minisearch
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.juno.com/s/search?r=minisearch
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=n-glx-2
CoolWebSearch variant
Fix / Info: Cwshredder tool
http://xblock.com/product_show.php?id=930
Windows ALL; discovered by nasdaq

(O) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search-styles.com/
Related to ASK BAR
http://www.systemlookup.com/O23/4513.html
Windows ALL; discovered by nasdaq

(O) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb
free version is bundled with adware which can display advertising on the computer and can have privacy issues
http://www.sunbeltsecurity.com/ThreatDisplay.aspx?tid=3062&cs=9E52488B45232653AB0828D3E60D6C03same as this one. hxxp://search.bearshare.com/
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.