| Type |
Caption |
Section |
File name |
Description |
 |
(*)API Machine |
|
winSOCKS.exe |
Homepage hijacker. (* = any digit) |
 |
(*)Run |
|
win32API.exe |
Homepage hijacker. (* = any digit) |
 |
AANYVKCF |
|
aanyvkcf.exe |
Added by the Adware.Safesearch.B Adware. This infection redirects certain pages to ones that it desires. Read more |
 |
AddClass |
|
[Installation_Path] |
Added by the STARTPAGE.F TROJAN! Read more |
 |
adtech2005 |
|
adtech2005.exe |
Reported as Trojan.Win32.StartPage.aw by Kaspersky Anti-Virus. |
 |
Antivirus |
|
av.exe |
Added by the SINKIN TROJAN! Resets IE start page to realphx.com Read more |
 |
bootpd.exe |
|
bootpd.exe |
Identified by Kapersky as Trojan.Win32.StartPage.vk. This infections hijacks popular search engines to another site and hijacks your start page to Premium Search which is a locally stored .html file. |
 |
ContentService |
|
winservn.exe |
Homepage hijacker |
 |
ControlPanel |
|
internst32.exe internet.dll,LoadNetworkProfile |
Added by the Adware.StartPage.B hijacker. Read more |
 |
ControlPanel |
|
internst32.exe internet.dll,LoadNetworkProfile |
Added by the Adware.StartPage.B hijacker. Read more |
 |
CSRSS |
|
CSRSS.EXE |
Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling Read more |
 |
CTFM0N.exe |
|
CTFM0N.exe |
Added by the Trojan.StartPage.P browser hijacker. Read more |
 |
Data789 |
|
Regedit.exe ....data789.tmp |
Homepage hijacker |
 |
Desktop |
|
avpcc.dll,Restore ControlPanel |
Added by the Troj/StartPa-ES startpage Trojan. |
 |
dllhelp |
|
dllhelp.exe |
Added by the STARTPAGE.DQ hijacker Read more |
 |
DownloadWare |
|
dw.exe |
DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent Read more |
 |
DownloadWare Engine |
|
Dwe.exe |
DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent Read more |
 |
drmu |
|
W95Mm.exe |
Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread Read more |
 |
dsa |
|
dsa.exe |
Homepage hijacker - redirecting to downseek.com |
 |
dw |
|
dw.exe |
DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent Read more |