View MDO database (R1)

Showing entries 951 to 975 of 1011.

Go directly to page: 1 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://rnd009.google...com/google.html
Worm.IM.Sohanad Worm.IM.Sohanad spreads via Yahoo Messenger and infects Windows.
http://www.threatexpert.com/report.aspx?md5=97887dee773614162a8f37346f1e5c39
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=n-glx-2
Checked with Google.
Fix / Info: Cwshredder tool
http://xblock.com/product_show.php?id=930
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.hpwis.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.msn.co.uk/
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchforfree.info/browser/
Searchforfree.info browser hijacker
Fix / Info: HijackThis
http://castlecops.com/startuplist-7444.html
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://sg.rd.yahoo.com/customize/ie/...rch.yahoo.com/
set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://spywaresoftstop.com/
Rogue/Suspect software. Aggressive, deceptive advertising
Fix / Info: HijackThis
http://www.spywarewarrior.com/rogue_anti-spyware.htm
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus7.hpwis.com/
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us10.hpwis.com/
Search page via Hewlett-Packard
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us6.hpwis.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us7.hpwis.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us9.hpwis.com/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.yahoo.com
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.c...31383880&id=5.0
Slotchcom redirector.
Fix / Info: HijackThis, AwAware tool
http://www.bleepingcomputer.com/forums/How_to_remove_Slotchcom_redirector-tx4204-0.html#entry29130
Windows ALL; discovered by Nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
Related to Spyware ShopNav as reported in this host file http://www.mvps.org/winhelp2002/hosts.htm
Fix / Info: HijackThis, delete file, AwAware tool
http://www.doxdesk.com/parasite/ShopNav.html
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.shopnav.com/sidesearch.cgi?uid=0&id=0
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis - AdAware tool
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://windiwsfsearch.com
Redirects Google search to malware sites.
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://windowsisearch.com
Trojan.Win32.Agent.aesw [Kaspersky Lab]
http://www.threatexpert.com/report.aspx?md5=210c2d02a16de44735e50eccefe346e
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bigpond.com.au
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.dogpile.com/info.dogpl/
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.hotmail.com
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.msn.se
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nuevaq.fm
set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.qfind.net/search.php?qq=%s
Unknown virus/trojan. Reported by HJTHelper as CWS infection. All logs reviewed on google are deleting this item with success. One reference in the link below.
Fix / Info: HJT, CWShredder tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=46996&hl=qfind.net/
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.