View MDO database (PP)

Showing entries 51 to 75 of 3051.

Go directly to page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 123

(L) C:\Acer\Empowering Technology\eSettings\eSettings.View.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(Q) C:\Adobe\Acrobat 7.0\Distillr\acrotray.exe
Related to and old version of Adobe Acrobat
Fix / Info: Important - Update your version.
http://www.adobe.com/products/acrobat.html
Windows ALL; discovered by Nasdaq

(X) C:\a\internetport3.exe
Trojan.Downloader.gen.h
http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=8691048#none
Windows ALL; discovered by Nasdaq

(X) C:\a\wincheckfe.exe
Troj/Agent-ANJJ
https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Agent-ANJJ/detailed-analysis.aspx
Windows ALL; discovered by Nasdaq

(N) C:\Brother\BPRSP\resources\BrSupSsp.exe
Brother Product Research and Support Program (BPRSP)
http://www.brother.com/product/productresearch/usa/
Windows ALL; discovered by Nasdaq

(X) c:\defender20.exe
Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc...
Fix / Info: Use Metallica's BFU script: alcanshorty.bfu - Canned speech at the URL Below.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996
Windows ALL; discovered by nasdaq

(X) C:\defender25.exe
Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc...
Fix / Info: To remove use Metallica's "Brute Force Uninstaller" with the "ALCANshorty.BFU" file.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996
Windows ALL; discovered by nasdaq

(X) C:\defender26.exe
Identified by S!ri's as a Smithfraud infection.
Fix / Info: Delete the file and run the removal tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\Administrator\Application Data\eiofax.exe
Troj/Inject-LR
Fix / Info: Delete the eiofax.exe file
http://www.sophos.com/security/analyses/viruses-and-spyware/trojinjectlr.html
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\Admin\Application Data\Microsoft\svchost.exe
Backdoor:Win32/Cycbot.A
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3AWin32%2FCycbot.A
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\Admin\Application Data\Microsoft\Windows\shell.exe
Backdoor:Win32/Cycbot.A
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3AWin32%2FCycbot.A
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\6DSS92c31Apgjk.exe
Trojan.Agent/Gen-RogueAS
http://www.superantispyware.com/malwarefiles/6DSS92C31APGJK.EXE.html
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\AVG April 2013 Campaign\AVG-Secure-Search-Update.exe
Adware
http://dottech.org/101609/avg-secure-search-toolbar-is-malware/
Windows ALL; discovered by Nasdaq

(O) C:\Documents and Settings\All Users\Application Data\Easybits GO\EasyBitsGO.exe
If you have Spyke this program may install without your consent.
Fix / Info: Instruction how to remove on the link.
http://www.ghacks.net/2011/05/29/how-to-uninstall-easybits-go-easybitsgo-exe-completely/
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\P1kAlMiG2Kb7Fz.exe
Trojan-Dropper.Win32.FrauDrop.crm
http://www.virustotal.com/file-scan/report.html?id=15114e846b05a533188f2d10c0a4a0c40058cd59419ffd8ca88465d30a48b822-1311321646
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer117.exe
Identified as Adware.QueryExplorer by Malwarebytes.
http://www.prevx.com/filenames/X1400852951149403665-X1/QUERYEXPLORER.EXE.html
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Application Data\ScanQuery\scanquery118.exe
Adware-OneStep.l!7C06FCB3854F
http://vil.nai.com/vil/content/v_444189.htm
Windows ALL; discovered by nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
Module - Reported by an OTL log.
Windows ALL; discovered by Nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(L) C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
Module - Reported by an OTL log.
Windows ALL; discovered by nasdaq

(O) C:\Documents and Settings\All Users\Application Data\WeCareReminder\ReminderHelper.exe
We-Care Reminder browser plugin
http://www.systemlookup.com/CLSID/67429-IEHelperv2_5_0_dll.html
Windows ALL; discovered by nasdaq

(U) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\GetRight.lnk
Shortcut to program
Windows ALL; discovered by Nasdaq

(X) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\palstart.exe
PalTalk is an IM client that is advertising supported.
Fix / Info: Delete File.
http://www.superadblocker.com/definition/palstart/
Windows ALL; discovered by nasdaq

(X) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\qwwyyu.exe
Added by a variant of the SmitFraud infection.
Fix / Info: Use S!Ri's smitfraudfix tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.