HJTS MDO list

HJTS MDO list

ALL  PP  F0  F1  F2  F3  R0  R1  N1  N2  N3  N4  O1  O2  O3  O4  O5  O6  O7  O8
O9  O10  O11  O12  O13  O14  O15  O16  O17  O18  O19  O20  O21  O22  O23

Showing entries 1 to 25 of 559.
Go directly to page: 1  2  3  4  5  6  7  23

(U)c:program files (x86)mozilla firefoxgreprefssecurity-prefs.js - pref("security.ssl.require_safe_negotiation", false);
DDS reported item.
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:WINNT\dxdiag.dll
Added by a variant of the SmitFraud infection.
Fix using: HijackThis - SpySherriff - Smitfraud family of trojans.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:WINNT\iebrowser.dll
Added by a variant of the SmitFraud infection.
Fix using: HijackThis
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:WINNT\iecontext.dll
Added by a variant of the SmitFraud infection.
Fix using: HijackThis - SpySherriff - Smitfraud family of trojans.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:WINNT\iedebug.dll
Added by a variant of the SmitFraud infection.
Fix using: Delete file - Remove Smitfraud infection.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:WINNT\iesettings.dll
Added by a variant of the SmitFraud infection.
Fix using: Delete file - Remove Smitfraud infection.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:WINNT\iesupport.dll
Added by a variant of the SmitFraud infection.
Fix using: Delete file - Remove Smitfraud infection.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)c:\127051.exe
HorseServer/Haxdoor/WebSiteViewer infection.
Fix using: Get this tool. http://www.atribune.org/downloads/HDFix.zip
http://spywareinfoforum.com/index.php?act=ST&f=6&t=41260
Windows: ALL; discoverer: nasdaq (Edit)

(X)c:\defender20.exe
Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc...
Fix using: Use Metallica's BFU script: alcanshorty.bfu - Canned speech at the URL Below.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\defender25.exe
Added by the Alcan Worm, Variant of Backdoor.Win32.Rbot, etc...
Fix using: To remove use Metallica's "Brute Force Uninstaller" with the "ALCANshorty.BFU" file.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=49996
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\defender26.exe
Identified by S!ri's as a Smithfraud infection.
Fix using: Delete the file and run the removal tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\Documents and Settings\Administrator\Application Data\eiofax.exe
Troj/Inject-LR
Fix using: Delete the eiofax.exe file
http://www.sophos.com/security/analyses/viruses-and-spyware/trojinjectlr.html
Windows: ALL; discoverer: nasdaq (Edit)

(X)c:\Documents and Settings\All Users\Start Menu\Programs\Startup\autorun.exe
Added by a variant of the SmitFraud infection.
Fix using: Delete file - Remove Smitfraud infection.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\Documents and Settings\All Users\Start Menu\Programs\Startup\palstart.exe
PalTalk is an IM client that is advertising supported.
Fix using: Delete File.
http://www.superadblocker.com/definition/palstart/
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\Documents and Settings\All Users\Start Menu\Programs\Startup\processes.txt
Added by a variant of the SmitFraud infection.
Fix using: Use S!Ri's smitfraudfix tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\Documents and Settings\All Users\Start Menu\Programs\Startup\qwwyyu.exe
Added by a variant of the SmitFraud infection.
Fix using: Use S!Ri's smitfraudfix tool.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows: ALL; discoverer: nasdaq (Edit)

(X)c:\documents and settings\all users\startup\skunk.exe
W32/Sunk-A will attempt to replace every file on the infected computer that has the extension EXE with a copy of itself. The worm will also copy itself to folders known to be used by popular Peer-To-Peer programs using various names.
http://www.sophos.com/virusinfo/analyses/w32sunka.html
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\Documents and Settings\Owner\Desktop\bifrost121\Bifrost.exe
Added by the Bifrost Backdoor trojan.
Fix using: Stop process delete folder.
http://research.sunbelt-software.com/threatdisplay.aspx?name=Bifrost&threatid=29428
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\Documents and Settings\wsservice\Application Data\eiofax.exe
Troj/Inject-LR
Fix using: Delete the eiofax.exe file
http://www.sophos.com/security/analyses/viruses-and-spyware/trojinjectlr.html
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\DOCUME~1\ALLUSE~1\APPLIC~1\msw\BMan.exe
Parasite Adware.SearchTheWeb is Adware related.
Fix using: HijackThis, AwAware tool
http://www.spyware-removal-guideline.com/adware-searchtheweb-removal
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp40.tmp
HorseServer/Haxdoor/WebSiteViewer infection.
Fix using: Get this tool. http://www.atribune.org/downloads/HDFix.zip
http://spywareinfoforum.com/index.php?act=ST&f=6&t=41260
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\DOCUME~1\User\LOCALS~1\Temp\AutoUpdate0\auto_update_install.exe
People on page.
Fix using: HijackThis - AdAware tool
http://doxdesk.com/parasite/AproposMedia.html
Windows: ALL; discoverer: nasdaq (Edit)

(X)c:\goaway.exe
Trojan.LowZones.ct - reported by ewido.
Fix using: ewido scan - Delete the file.
http://www.techsupportforum.com/computer/topic/75399-1.html
Windows: ALL; discoverer: nasdaq (Edit)

(X)C:\KT\Sysman.exe
Spyware.KeyTrap is a spyware program that records all keyboard activities.
Fix using: HijackThis, AwAware tool
http://securityresponse.symantec.com/avcenter/venc/data/pf/spyware.keytrap.html
Windows: ALL; discoverer: nasdaq (Edit)

(X)c:\local.exe
A variant of the Key Logger that captures passwords as they are entered or transmitted. Some password capture trojans impersonate the login prompt, asking the user to provide their password.
Fix using: Delete the file - Virus/trojan scan.
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453073922
Windows: ALL; discoverer: nasdaq (Edit)

This is a list of items that is designed to help with the analysis of HijackThis logs. It is by no means exhaustive (in fact it is being added to all the time), and is not designed to replace any existing list elsewhere on the Internet. Rather, this list is designed to complement those other lists.