O22 HijackThis Entries

Bleeping Computer

Welcome Guide Blogs Chat Help Search RSS

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Have a problem and would like to ask us for help? To learn how to ask your question Click Here!

Do you have popups or other malware infecting your computer? If so, Start Here!

Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> O22 HijackThis Entries

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List

· Submit a Startup

· Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Pages: (4) « First ... 2 3 [4]

Name	Filename	Status	Description
{2C1CD3D7-86AC-4068-93BC-A02304BB8C34}]	dcom_20.dll	X	Identified by Kaspersky Antivirus as Trojan-Proxy.Win32.Xmiler.b.
{0c7416f0-dd23-420f-97f5-aae352ea2bf1}	wfkduei.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar.
{336ec37f-54bf-4f13-8237-03f64fa591e7}	oerucu.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{24c60b9b-26b5-4201-9f7a-fb9219356ae9}	ulztc.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{5bc82bdb-bc03-4671-9a78-3ef2b68449de}	oqipt.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{70fbd528-2d3c-4a00-9b8c-bbf441e534be}	iqzv.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{e04408db-4812-4478-8d4d-e46edcffd3b6}	fyhhxw.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{64ba30a2-811a-4597-b0af-d551128be340}	appmagr.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{89aef01d-d237-49c7-84dc-4e1904c1fd31}	sbnudh.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{35a88e51-b53d-43e9-b8a7-75d4c31b4676}	reglogs.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{C9FA1DC9-1FB3-C2A8-2F1A-DC1A33E7AF9D}	ginuerep.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{8e99f990-b75a-4568-b3c8-24cbc8cbbfc1}	autodisc32.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar.
{1C3B31AE-FD16-D2CE-43FF-DC4CD5C1BC5E}	dvdcap.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar.
(2C1CD3D7-86AC-4068-93BC-A02304BB8C34)	dcom_16.dll	X	Added by the Troj/Agent-BIW backdoor Trojan.
{CA14EE13-ED15-C4A2-17FF-DA4D15C1BC5E}	twain32.dll	X	A file used to issue fake security alerts on your taskbar and to install SpyFalcon 2.0 when you click on them.
{EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E}	sivudro.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar and install SpywareQuake without your consent.
{CD5E2AC9-25CE-A1C5-D1E2-DC6B28A6ED5A}	xenadot.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar and install SpywareQuake without your consent.
{AC1B4DA2-12FA-31F2-1A7D-CD2B14E6AD4E}	suprox.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar and install SpywareQuake without your consent.
{E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D}	stickrep.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar.
(429F4BB8-7BF7-4152-8011-3C6F9EB7E892)	chp.dll	X	Added by the Troj/Spabot-E spam mailing Trojan.
{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}	dxmpp.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar.
{C1A2FDA2-1A5B-2A8F-F3A2-B22DA1A3C41D}	netwrap.dll	X	Added by a rogue antispyware program who's affiliates install files that replaces the Windows wallpaper with a fake virus alert message and issues fake virus alerts.
{A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F}	wbeconm.dll	X	Added by the Adware.TopAV which replaces the Windows wallpaper with a fake virus alert message containing links to topantivirus.biz or Spyaxe and issues fake virus alerts.
(0C81EA61-20F8-4DDC-81BF-AF0923078398)	msctr.dll	X	Added by the Troj/Bankhof-E password-stealing Trojan. This infection installs the file C:\Windows\System32\rdrlib.dll.
(3F143C3A-1457-6CCA-03A7-7AA23B61E40F)	child.dll	X	Added by the Troj/Small-EX backdoor Trojan.
Secure Patch	run.dll	X	Added by the Troj/Dloader-ZS Trojan.
OutPost FireWall	child.dll	X	Added by the Troj/Small-ER backdoor Trojan.
SecurePatch	run.dll	X	Added by the Troj/Dloader-XF Trojan.
OLE Module	vbn.dll	X	Added by the Troj/Bankhof-C Trojan. The file %System%rdrlib.dll will be created by this infection as well.
OLE Module	msbnk.dll	X	Added by the Troj/Bankhof-B information stealing Trojan targetting German banks.
OLE Module	smp.dll	X	Added by the Trojan.SpBot Trojan.
Reload Browse	svchosts.dll	X	Added by the Adware.TopAV which replaces the Windows wallpaper with a fake virus alert message containing links to topantivirus.biz or Spyaxe and issues fake virus alerts.
OLE Object	floop.dll	X	Added by the Troj/Proxmeg-B proxy Trojan.
DDE Control Module	mtwirl32.dll	X	Added by the Trojan.Bookmarker.C Trojan.
Sysctl Desktop Handler	systr.dll	X	This file will hijack Internet Explorer to show the start page of jimbutt.com or globolook.com.
Interlinking Memory Support	param32.dll	X	Added by the Troj/Warspy-D Trojan. This will hijack Internet Explorer to the following domains: hotoffers.info and newgenlook.info among others.
OLE Module	thn32.dll	X	Added by the Troj/Proxy-L proxy Trojan.

Pages: (4) « First ... 2 3 [4]

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.