View MDO database (R0)

Showing entries 951 to 975 of 1035.

Go directly to page: 1 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42

(U) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://www.myspace.com/
set by user
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
Leftover or blank item. May as well fix as it only creates clutter
Fix / Info: HijackThis
Windows XP; discovered by Angoid

(L) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
Legit on Vista computer
Windows VT; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://103.nowfind.biz/pps.php
blocked by this hosts file. Adware NowFind.
Fix / Info: HijackThis, AwAware tool
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://69.50.182.88/?qq=
Trojan.Magise
Fix / Info: HJT and Virus/trojan removal programs.
http://www.sarc.com/avcenter/venc/data/pf/trojan.magise.html
Windows ALL; discovered by Nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://balabolka.biz/start.html
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(O) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.c...aspx?TbId=60280
Related to the Crawler Toolbar. Read the link.
http://www.systemlookup.com/CLSID/28542-ctbr_dll.html
Windows ALL; discovered by nasdaq

(O) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.c...aspx?TbId=60426
Set by user
Fix / Info: Related to the Crawler Toolbar. Read the link.
http://www.systemlookup.com/CLSID/28542-ctbr_dll.html
Windows ALL; discovered by nasdaq

(O) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.c...aspx?TbId=60446
Related to the Crawler Toolbar. Read the link.
http://www.systemlookup.com/CLSID/28542-ctbr_dll.html
Windows ALL; discovered by nasdaq

(O) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/
Read the link.
http://vil.mcafeesecurity.com/vil/content/v_137764.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://farm.thinktarget.com/partners/ams/r...&o=0&q=
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://minisearch.startnow.com/
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://morwillsearch.com/?adv_id=fish&sub_id=
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://searchforfree.info/browser/
Searchforfree.info browser hijacker
Fix / Info: HijackThis
http://castlecops.com/startuplist-7444.html
Windows ALL; discovered by nasdaq

(U) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://srch-us6.hpwis.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://toolbar.inbox...aspx?tbid=80410
set by user
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.c...31383880&id=5.0
Slotchcom redirector.
Fix / Info: HijackThis, AwAware tool
http://www.bleepingcomputer.com/forums/How_to_remove_Slotchcom_redirector-tx4204-0.html#entry29130
Windows ALL; discovered by Nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
Related to Spyware ShopNav as reported in this host file http://www.mvps.org/winhelp2002/hosts.htm
Fix / Info: HijackThis
http://www.doxdesk.com/parasite/ShopNav.html
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.mrfindalot.com/search.asp?si=
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.mrfindalot.com/search.asp?si=20065&k=
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.qfind.net/search.php?qq=%s
Unknown virus/trojan. Reported by HJTHelper as CWS infection. All logs reviewed on google are deleting this item with success. One reference in the link below.
Fix / Info: HJT, CWShredder tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=46996&hl=qfind.net/
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchmaid.com/search.php?qq=%s
Searchmaid hijacker
Fix / Info: HijackThis
Windows ALL; discovered by nasdaq

(X) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
Leftover or blank item. May as well fix this as it only creates clutter
Fix / Info: HijackThis
Windows XP; discovered by Angoid

(L) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
Search Assistant, required on Vista but usually unnecessary (or malware) on other platforms
Windows VT; discovered by Angoid

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.