View MDO database (ALL)

Showing entries 16276 to 16300 of 18323.

Go directly to page: 1 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 733

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.quicknavigate.com/search.php?qq=%1
Smitfraud family of trojans
Fix / Info: Fix if you have access: http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=15
http://www.sophos.com/virusinfo/analyses/trojpupere.html
Windows ALL; discovered by Nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.search345quest.com/sp2.php
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchtraffic.com/search.php3?l=protect1&term=
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.security2k.net/search.php?qq=%1
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis - AdAware tool
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.seektheglobe.com/sp2.php
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.startsearches.net/search.php?qq=%1
Related to the new Smitfraud family of trojans
Fix / Info: Removal see Topic below
http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=15
Windows ALL; discovered by Nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.the818search-co.com/sp2.php
KEYLOGGER probably - The818search is registered to Networld One
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.updatesearches.com/search.php?qq=%1
Smitfraud family of trojans
Fix / Info: Fix if you have access: http://spywareinfoforum.com/index.php?act=ST&f=6&t=45833&st=15
http://www.sophos.com/virusinfo/analyses/trojpupere.html
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.vroomsearch.com/
Unknown source.
Fix / Info: Blocked by this hosts file
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by Nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = searchmiracle.com/sp.php
Bube.d
Fix / Info: Kaspersky anti-virus (30 day trial version if not already present)
http://castlecops.com/postt106277.html
Windows ALL; discovered by Angoid

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = www.searchant.com/sp
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = »searchmiracle.com/sp.php
Bube.d
Fix / Info: Kaspersky anti-virus (30 day trial version if not already present)
http://castlecops.com/postt106277.html
Windows ALL; discovered by Angoid

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Bing:
Set by user
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://69.50.182.88/?qq=
Trojan.Magise
Fix / Info: HijackThis, delete file, AwAware tool
http://www.sarc.com/avcenter/venc/data/pf/trojan.magise.html
Windows ALL; discovered by Nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://as.starware.com/dp/search?x=wKX1ILE...btuEAQiv1HlyAV8
Adaware Starware.
Fix / Info: HijackThis - SpySherriff - Smitfraud family of trojans.
http://www.symantec.com/security_response/writeup.jsp?docid=2005-050313-4341-99&tabid=2
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://as.starware.com/dp/search?x=wKX1ILE...btuEAQiv1HlyAV8
Adaware Starware.
Fix / Info: HijackThis - AdAware tool
http://www.symantec.com/security_response/writeup.jsp?docid=2005-050313-4341-99&tabid=2
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://as.starware.com/dp/search?x=wKX1ILE...iSwOZHJItgtgiVt
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(X) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://as.starware.com/dp/search?x=wKX1ILE...ksHz6bU1Q3SqP1N
Blocked by the HOSTS file. See URL
Fix / Info: HijackThis
http://www.mvps.org/winhelp2002/hosts.htm
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://au.search.yah...?fr=mcafee&p=%s
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://ca.search.yah...?fr=mcafee&p=%s
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://dogpile.com
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.ca/0SEE...S01?FORM=TOOLBR
set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.ca/0SEENCA/SAOS01?FORM=TOOLBR
Set by user
Windows ALL; discovered by nasdaq

(U) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0...S01?FORM=TOOLBR
set by user
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.