CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O20 AppInit_DLLs and Winlogon Notify

Currently 488 entries and growing...
Last updated on 2008-06-18 18:08:23 Eastern.

FBJ originally ran this list but closed it permanently. FBJ graciously permitted CastleCops to continue maintaining the list as of Jul 8, 2005. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    TypeNameStatusPath/FileDescription
    Winlogon NotifypsksdsXpsksds.dllHaxdoor variant Goldun
    Winlogon NotifyPSUTYL%SYSDIR%\PSUWNP.dll Fujitsu
    Winlogon Notifypx86emulX%SYSDIR%\px86emul.dll Goldun
    Winlogon NotifyQConGinaLQConGina.dllIBM Access Connections GINA
    Winlogon NotifyqhdtvvXqhdtvv.dll Troj/Goldun-FI
    Winlogon NotifyRAinitLRAinit.dll RemotelyAnywhere
    Winlogon Notifyrandom nameXrandom name spelled backwards.datCATLEvents vriant of Adware.VirtuMonde
    Winlogon Notifyrandom name compiled from elements taken from a listX(same) random name.dll Vundo.B
    Winlogon NotifyrdrVR2XrdrVR2.dll Troj/Haxdoor-AJ
    Winlogon NotifyRegCompactLRegCompact.dllAMUST Registry Cleaner
    Winlogon Notifyrege2usbXrege2usb.dllGoldun variant
    Winlogon NotifyreqXreq.dat Troj/Bdoor-CPK
    Winlogon NotifyreqXreq.dll Troj/ConHook-B
    Winlogon Notifyreset5Oreset5.dllIllegal, but usually installed by user
    Winlogon Notifyrlx51domXrlx51dom.dllGoldun variant
    Winlogon Notifyrlx5dom1Xrlx5dom1.dllGoldun variant
    Winlogon Notifyrmk8otXrmk8ot.dllHaxdoor variant
    Winlogon NotifyrpccXrpcc.dll Backdoor.Win32.Bifrose.aat
    Winlogon Notifyrpcc1Xrpcc1.dllnot yet identified Trojan/Backdoor
    Winlogon NotifyrpccdX%SYSDIR%\rpccd.dll Trojan.Downloader-RPCC.Process
    Winlogon NotifyrsdapiXrsdapi.dll TSPY_GOLDUN.AT
    Winlogon NotifyRun, RunOnce, RunOnceEx, RunServices-, Setup, Shell
    Extensions, ShellCompatibility, ShellScrap    		Xrandom named dll in the System32 folderVariant of Adware.Look2Me
    Winlogon Notifyrxx5otXrxx5ot.dllHaxdoor variant
    Winlogon NotifySABWinLogonLSABWINLO.DLL SuperAdBlocker
    Winlogon NotifySASWinLogonLSASWINLO.dll SUPERantispyware
    Winlogon Notifysatad640Xsatad640.dll Goldun_variant
    Winlogon Notifysatau320Xsatau320.dllGoldun variant
    Winlogon NotifysatdllXsatdll.dll Troj/Haxdoor-AS
    Winlogon Notifysdcard98Xsdcard98.dll Trojan-Spy.Win32.Goldun
    Winlogon NotifySDNotifyLSDNotify.dllSpyware Detector; note
    Winlogon NotifySDNotifyLSDNotify.dll Spyware_Doctor
    Winlogon Notifyse500mdmXse500mdm.dllGoldun variant
    Winlogon Notifyse633mxxXse633mxx.dllGoldun variant
    Winlogon NotifySebringLLgNotify.dllAlienWare Desktop Skins
    Winlogon Notifysemd32Xsemd32.dll Haxdoor
    Winlogon NotifySensSrvXsenssrv.dllDownloader.Agent.afl
    Winlogon NotifyseppgsXseppgs.dll Troj/Haxdoor-CY
    Winlogon NotifysertgsXsertgs.dll Haxdoor
    Winlogon Notifysha1hshX%SYSDIR%\sha1hsh.dllGoldun variant
    Winlogon NotifyShellServiceObjectDelayLoad, SideBySide, StillImage,
    Syncmgr, Telephony, ThemeManager, Themes, Unimodem    		Xrandom named dll in the System32 folderVariant of Adware.Look2Me
    Winlogon NotifysksdllXsksdll.dll Troj/Haxdoor-AN
    Winlogon Notifyskyu16Xskyu16.dllHaxdoor variant
    Winlogon Notifyskyx16Xskyx16.dllHaxdoor variant
    Winlogon NotifysmcssXsmcss.dll Troj/SCLog-AJ
    AppInit_DLLsspoolsv.dllX%sysdir%\spoolsv.dll ClickSpring.PuritySCAN
    Winlogon NotifyspoolsvcXspoolsvc.dll Troj/Dropper-AT
    Winlogon NotifysreXsre.dllTrojan.Downloader.Agent.Fc
    Winlogon NotifyssldrXssldr32.dll Troj/Agent-ZD
    Winlogon NotifyssqroonX%SYSDIR%\ssqroon.dll Trojan.Awax
    Winlogon Notifyst3XC:\WINDOWS\system32\st3.dllTrojanDownloader.Delf.NBH
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    176ppm 1.038s (0.007s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer