View MDO database (R1)

Showing entries 526 to 550 of 1011.

Go directly to page: 1 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 41

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.startsearches.net/search.php?qq=%1
Related to the new Smitfraud family of trojans
Fix / Info: Removal see Topic below
http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=15
Windows ALL; discovered by Nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.telstra.com/
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.the818search-co.com/sp2.php
KEYLOGGER probably - The818search is registered to Networld One
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.updatesearches.com/search.php?qq=%1
Smitfraud family of trojans
Fix / Info: See fix at the suggested URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.vroomsearch.com/
Unknown source.
Fix / Info: Blocked by this hosts file
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by Nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http:://www.startsearches.net/search.php?qq=%1
Smitfraud family of trojans
Fix / Info: See fix at the suggested URL
http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
Adware-WinActive
Fix / Info: HijackThis - AdAware tool
http://vil.nai.com/vil/content/v_125025.htm
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.dogpile.com
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.searchant.com/sp
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo!
Set by user
Windows ALL; discovered by nasdaq

(Q) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearsh...ar.html?src=ssb
This site has a poor reputation.
http://www.mywot.com/en/scorecard/bearshare.com
Windows ALL; discovered by nasdaq

(O) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
free version is bundled with adware which can display advertising on the computer and can have privacy issues
http://www.sunbeltsecurity.com/ThreatDisplay.aspx?tid=3062&cs=9E52488B45232653AB0828D3E60D6C03same as this one.
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = http://www.internet-search.info/searchbar
CoolWebSearch Infection
Fix / Info: HijackThis - CWShredder
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
Adware-WinActive
Fix / Info: HijackThis - AdAware tool
http://vil.nai.com/vil/content/v_125025.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://batonrouge.cox.net/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://homesite.service.ozemail.com.au/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.btopenworld.com/togetherinternet
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.cherche.us
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.optonline.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.rr.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.rr.com/v5/home/0,1793,185,00.html
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.searchforit.com
Adware searchforit.
Fix / Info: HijackThis
http://www.symantec.com/security_response/writeup.jsp?docid=2004-111211-5006-99&tabid=2
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.uefa.com/
Set by user
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.