View MDO database (ALL)

Showing entries 18276 to 18300 of 18323.

Go directly to page: 1 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733

(Q) x64-mPolicies-System: FilterAdministratorToken = dword:0
Only the built-in administrator account (RID 500) MUST be placed into Admin Approval Mode. Approval is required when performing administrative tasks.
http://msdn.microsoft.com/en-us/library/cc232760%28v=prot.10%29.aspx
Windows ALL; discovered by nasdaq

(Q) x64-mPolicies-System: FilterAdministratorToken = dword:1
Only the built-in administrator account (RID 500) MUST be placed into Admin Approval Mode. Approval is required when performing administrative tasks.
http://msdn.microsoft.com/en-us/library/cc232760%28v=prot.10%29.aspx
Windows ALL; discovered by nasdaq

(Q) x64-mPolicies-System: HideFastUserSwitching = dword:0
The Start menu and the Task Manager buttons are NOT disable.
http://social.answers.microsoft.com/Forums/en-US/w7security/thread/643ea7cd-d98a-42be-b8d4-ba37801a9ea8
Windows ALL; discovered by Nasdaq

(Q) x64-mPolicies-System: NoDispAppearancePage = dword:0
Hiding the Display Appearance Page. The default is 0 (0x0)
http://www.pc1news.com/hiding-the-display-appearance-page-168.html
Windows ALL; discovered by Nasdaq

(Q) x64-mPolicies-System: NoDispSettingsPage = dword:0
This option hides the Settings page from the display properties control. 0 = disabled.
http://www.pctools.com/guides/registry/detail/171/
Windows ALL; discovered by Nasdaq

(Q) x64-mPolicies-System: PromptOnSecureDesktop = dword:0
Disabling this policy disables secure desktop prompting. All credential or consent prompting will occur on the interactive user's desktop.
http://msdn.microsoft.com/en-us/library/cc232766%28PROT.13%29.aspx
Windows ALL; discovered by nasdaq

(Q) x64-mPolicies-System: SafeModeBlockNonAdmins = dword:1
Block standard users to log in on Windows Safe mode - May have beeen set by an Admin.
http://terrytlslau.tls1.cc/2013/04/block-standard-users-to-log-in-on.html
Windows ALL; discovered by Nasdaq

(Q) x64-mPolicies-System: scforceoption = dword:0
Log On in Safe Mode to Configure the Computer for Password Logon.
http://technet.microsoft.com/en-us/library/dd979537%28v=ws.10%29.aspx
Windows ALL; discovered by nasdaq

(Q) x64-mPolicies-System: shutdownwithoutlogon = dword:1
The Shutdown button is enabled.
http://technet.microsoft.com/en-us/library/cc939855.aspx
Windows ALL; discovered by nasdaq

(Q) x64-mPolicies-System: SoftwareSASGeneration = dword:1
This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS).
http://www.insidetheregistry.com/regdatabase/viewvalue.aspx?valueid=2320
Windows ALL; discovered by Nasdaq

(Q) x64-mPolicies-System: SynchronousMachineGroupPolicy = dword:0
Lets the system display the logon prompt before it finishes updating computer Group Policy.
http://msdn.microsoft.com/en-us/library/ms812908.aspx
Windows ALL; discovered by Nasdaq

(Q) x64-mPolicies-System: SynchronousUserGroupPolicy = dword:0
Lets the system display the Windows desktop before it finishes updating user Group Policy.
http://msdn.microsoft.com/en-us/library/ms812997.aspx
Windows ALL; discovered by Nasdaq

(Q) x64-mPolicies-System: undockwithoutlogon = dword:1
Devices: Allow undock without having to log on
http://www.fiveanddime.net/windows-vista-notes/windows-vista-registry-settings.html
Windows ALL; discovered by nasdaq

(Q) x64-mPolicies-System: ValidateAdminCodeSignatures = dword:0
User Account Control: Only elevate executables that are signed and validated. 0 (Default) = Disabled
http://technet.microsoft.com/en-us/library/dd835564%28v=ws.10%29.aspx
Windows ALL; discovered by nasdaq

(U) x64-mSearch Page = www.bing.com
Set by user
Windows ALL; discovered by Nasdaq

(U) x64-mStart Page = hxxp://acer.msn.com
Set by user.
Windows ALL; discovered by nasdaq

(U) x64-mStart Page = hxxp://asus.msn.com
Set by user.
Windows ALL; discovered by nasdaq

(U) x64-mStart Page = hxxp://lenovo.msn.com
Set by user.
Windows ALL; discovered by nasdaq

(U) x64-mStart Page = hxxp://www.toshibadirect.com/dpdstart
Set by user
Windows ALL; discovered by Nasdaq

(U) x64-mWinlogon: Shell = Explorer.exe
DDS reporting entry.
Windows ALL; discovered by Nasdaq

(Q) x64-mWinlogon: Userinit = C:\Windows\System32\userinit.exe
Check the file if having a problem at startup.
http://www.file.net/process/userinit.exe.html
Windows ALL; discovered by Nasdaq

(Q) x64-mWinlogon: Userinit = C:\Windows\System32\userinit.exe,
DDS reporting entry. Check the file if the problem persists.
Windows ALL; discovered by Nasdaq

(Q) x64-mWinlogon: Userinit = C:\Windows\SysWOW64\userinit.exe,
Check the file if the problem persists.
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.