CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O20 AppInit_DLLs and Winlogon Notify

Currently 488 entries and growing...
Last updated on 2008-06-18 18:08:23 Eastern.

FBJ originally ran this list but closed it permanently. FBJ graciously permitted CastleCops to continue maintaining the list as of Jul 8, 2005. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    TypeNameStatusPath/FileDescription
    AppInit_DLLs(no name)Laakah.dllAdvanced Anti Keylogger
    AppInit_DLLs(no name)?cahooknt.dllFaxWork related?
    AppInit_DLLs(no name)OCLKERN.DLLCrackloc, illegal but usually installed by the user
    AppInit_DLLs(no name)Lakdllnt.dll Anti-keylogger
    AppInit_DLLs(no name)Xmad.dllTVMedia parasite
    AppInit_DLLs(no name)?MSGINA268r.dllProbably malware that replaces MSGINA
    AppInit_DLLs(no name)?rtc.dllUnidentified, probably malware
    AppInit_DLLs(no name)Xresfdo.dll BCK/Agent.E
    AppInit_DLLs(no name)Xkbd.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xsqlik.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xwinjdp.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xwdm.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xmsdlml.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xwink.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xkbdg.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xsqlpn.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xctl.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xctlonb.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xres.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xwinifhi.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xd3dcak.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xwinei.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xwinf.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xmsconfd.dll Trojan.Bookmarker
    AppInit_DLLs(no name)Xavpcc.dll Trojan.Bookmarker.B
    AppInit_DLLs(no name)Xctrlpan.dll Trojan.Bookmarker.B
    AppInit_DLLs(no name)Xms.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xwinmpb.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xlogjonc.dll Backdoor.Agent.B
    AppInit_DLLs(no name)?kbdarme419l.dllUnknown malware, probably CWS
    AppInit_DLLs(no name)LROUSRNT.DLLReachOut from Stac_Electronics
    AppInit_DLLs(no name)LssohookSSO Plus
    AppInit_DLLs(no name)LKATRACK.DLLSassafras K2
    AppInit_DLLs(no name)LAPITRAP.DLLNorton CleanSweep
    AppInit_DLLs(no name)LUmxSbxExw.dllTiny Personal Firewall
    AppInit_DLLs(no name)Lsockspy.dllBitDefender Pro
    AppInit_DLLs(no name)Lscorillont.dll BitDefender
    AppInit_DLLs(no name)Lwbsys.dll Windowblinds
    AppInit_DLLs(no name)LNVDESK32.DLLNVIDIA display driver
    AppInit_DLLs(no name)Lhplun.dllJetico's BestCrypt
    AppInit_DLLs(no name)?adsmsext932m.dllIs it another version of this ADSI
    AppInit_DLLs(no name)?AeXPrcssAppInitNT.dllCould be: Altiris, Application Metering Solution 5.5
    AppInit_DLLs(no name)?FHook.dllNot sure: Finjan SurfinGate
    AppInit_DLLs(no name)?mydocs.tlbUnidentified malware, probably CWS
    AppInit_DLLs(no name)Xcome.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Lmfaphook.dllCitrix Metaframe
    AppInit_DLLs(no name)Xlogdn.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xlogd.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xctlfdh.dll Backdoor.Agent.B
    AppInit_DLLs(no name)X.tlb (* = random digit)romahere variant of CWS
    AppInit_DLLs(no name)LPAVWAIT.DLLPanda AntiVirus
    AppInit_DLLs(no name)Xhlpkma.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xlogbf.dll Backdoor.Agent.B
    AppInit_DLLs(no name)Xdrv***.tmp.dllinstalldollars adware
    AppInit_DLLs(no name)Xcomppj.dll Backdoor.Agent.B
    AppInit_DLLs(no name)X********.dll.dll.dll (and even many more multiple dll extensions)SWAP-X\Win-eto variant of CWS
    AppInit_DLLs(no name)XWqk.dll W32.ElKern.3326
    AppInit_DLLs(no name)Xmsvsres.dll Troj/Urbin-A
    AppInit_DLLs(no name)LOCMAPIHK.DLLOutlook MAPI hook set by PGP
    AppInit_DLLs(no name)LMsgPlusLoader.dll MessengerPlus
    AppInit_DLLs(no name)LIconCodecService.dllIcon Codec Service DLL, Microsoft
    AppInit_DLLs(no name)Xrepairs.dll, repairs**.dll (**= a number of random digits) Adware.SurfSideKick
    AppInit_DLLs(no name)Xsysmain.dll Adware.SuperSpider
    AppInit_DLLs(no name)Lwl_hook.dllOutpost Firewall by Agnitum
    AppInit_DLLs(no name)LGoogle\GOOGLE~1\GOEC62~1.DLLRelated to Google_Desktop
    AppInit_DLLs(no name)Ladialhk.dllKaspersky Anti-Virus 2006 (Beta)
    AppInit_DLLs(no name)Lwmfhotfix.dll WMF_hotfix
    AppInit_DLLs(no name)Linterceptor.dll SpyCatcher
    AppInit_DLLs(no name)Lqaphooks.dll Silkperformer
    AppInit_DLLs(no name)LRMProcessLink.dllCitrix Metaframe
    AppInit_DLLs(no name)Xsysmain.dll Trojan.Superspider
    AppInit_DLLs(no name)XRunner.dll FCADVICE
    AppInit_DLLs(no name)Xiniwin32.dll E2Give
    AppInit_DLLs(no name)Xpushow*.dll (* = random number)AdWare.Win32.AdvertMen.a
    AppInit_DLLs(no name)Lmsgrmate.dllMessenger Mate
    AppInit_DLLs(no name)Xinicfg32.dll E2Give
    AppInit_DLLs(no name)Xlsass.dllAdware.Purityscan variant
    AppInit_DLLs(no name)Xchkdsk.dll Trojan-VMMSWM
    AppInit_DLLs(no name)Xjavaw.dllPurityscan adware variant
    AppInit_DLLs(no name)X%SYSDIR%\alg.dll PurityScan
    AppInit_DLLs(no name)Lwxvault.dll Embassy_Trust_Suite
    AppInit_DLLs(no name)XEQMini.dllcmapp adware
    AppInit_DLLs(no name)XBattyRun2.dll Adware.CASClient
    AppInit_DLLs(no name)Xdxclib303562752.dllDeluxe Communications (a SurfSideKick variant)
    AppInit_DLLs(no name)Xe1.dllSeveral Stration variants
    AppInit_DLLs(no name)X%SYSDIR%\services.dllPurityScan variant
    AppInit_DLLs(no name)L%SYSDIR%\ctu33.dll Euroglot
    AppInit_DLLs(no name)Xmshta.dll Adware.PurityScan
    AppInit_DLLs(no name)Lati2evxx.dll ATI_External_Event_Utility
    AppInit_DLLs(no name)Xspool32.dllAdware.Purityscan variant
    AppInit_DLLs(no name)Xldcore.dll Affiliate.Adware
    AppInit_DLLs(no name)LWindows\System32\vsmvhk.dll folder in (XP) ShadowUser_Pro - Create a virtual copy of your system for private and safe Web surfing.
    AppInit_DLLs(no name)Xaclekern.dll Warezov_variant
    AppInit_DLLs(no name)XNTDLL32.dllParasite of Chinese origin AdWare.Win32.Agent
    AppInit_DLLs(no name)Xmp4sglmf.dll Stration/Warezov
    AppInit_DLLs(no name)Xw3sskbda.dll Stration/Warezov
    AppInit_DLLs(no name)Xp2psmsih.dll Startion/Warezov
    AppInit_DLLs(no name)Xwshtlprh.dll Startion/Warezov
    AppInit_DLLs(no name)Xmsji449c14b7.dll Stration/Warezov
    AppInit_DLLs(no name)Xsvchu.dllTrojan-Downloader.Win32.Small.crd variant
    AppInit_DLLs(no name)Xicmpdx3j.dll Warezov-variant
    AppInit_DLLs(no name)Xconfjpg.dll W32/Stration-AN
    AppInit_DLLs(no name)Xjpgstat.dll W32/Stration-AN
    AppInit_DLLs(no name)X%SYSDIR%\hmlscr.dll Troj/Bckdr-QIB
    AppInit_DLLs(no name)Xhtmlythyt.dll Troj/Goldun-FS
    AppInit_DLLs(no name)Xicmufecl.dll Warezov/Stration variant
    AppInit_DLLs(no name)Xconfbrw.dll Warezov/Stration
    AppInit_DLLs(no name)Xbrwstat.dll Warezov/Stration
    AppInit_DLLs(no name)Xtrafkbdy.dllWarezov/Stration variant
    AppInit_DLLs(no name)Lacaptuser32.dll3D Capture software
    AppInit_DLLs(no name)Xperfc000.datTR/Crypt.XPACK.Gen
    AppInit_DLLs(no name)L%PROGRAMFILES%\Google\Web Accelerator\GoogleWebAccToolbar.dll Google_Web_Accelerator
    Winlogon Notify(no name)L\SystemOK\BACKON~1\botwlnp.dll BackOnTrack
    AppInit_DLLs(no name)Xmprmdpnm.dll Stration/Warezov
    AppInit_DLLs(no name)L%PROGRAMFILES%\Google\Web Accelerator\fastsearch.dll Google_Web_Accelerator
    AppInit_DLLs(no name)Lsecuload.dll SpyCatcher
    AppInit_DLLs(no name)Lr3hook.dll Kaspersky
    AppInit_DLLs(no name)Xrsvp322.dll Troj/Riler-AA
    AppInit_DLLs(no name)Xperfsm.datTrojan.Crypt.XPACK (WinAntiSpyware variant)
    AppInit_DLLs(no name)Xhrum***.txt where *** is a random number. Troj/Spywad-AR
    AppInit_DLLs(no name)XSoDAHK.DLL Adware.Sogou
    AppInit_DLLs(no name)X%SYSDIR%\hanonvt.ini Smitfraud
    AppInit_DLLs(no name)Xhrum323.txt Smitfraud
    AppInit_DLLs(no name)X%SYSDIR%\hadjajr.ini Smitfraud
    AppInit_DLLs(no name)Xhrum.txt Smitfraud
    AppInit_DLLs(no name)X%SYSDIR%\systems.txt Smitfraud
    AppInit_DLLs(no name)LAPSHook.dll Cognizance_Identity_Manager
    AppInit_DLLs(no name)X%SYSDIR%\stdole32.dat Smitfraud
    AppInit_DLLs(no name)X%SYSDIR%\sulimo.dat Smitfraud
    AppInit_DLLs(no name)X%SYSDIR%\skuns.dat SmitFraud
    AppInit_DLLs(no name)Lguard32.dll Comodo_Firewall
    AppInit_DLLs(no name)Xkvmxfma.dllStorark R
    AppInit_DLLs(no name)LeNetHook.dll Acer_eNet
    AppInit_DLLs(no name)XSysWln74_3.dllTrojan-PSW.Win32.OnLineGames variant
    AppInit_DLLs(no name)X%Windir%\murka.dat Trojan.Virantix.B
    AppInit_DLLs(no name)X%SYSDIR%\rtmp.dll Troj/Lineag-DE
    AppInit_DLLs(no name)X%SYSDIR%\prai.dll Marketscore.RelevantKnowledge
    AppInit_DLLs(no name)X%SYSDIR%\wowfx.dllTrojan.Win32.Qhost.abh
    AppInit_DLLs(no name)Xcru629.datTR/Crypt.XPACK.Gen
    AppInit_DLLs(no name)X%SYSDIR%\rlai.dllRelevantKnowledge variant
    AppInit_DLLs(no name)Lavgrsstx.dll AVG_8
    AppInit_DLLs(no name)XiSecurity.cpl Search2Find
    AppInit_DLLs(no name)LPGPmapih.dll PGP_Desktop
    Winlogon NotifyA3dxqXa3dxq.dllPurityscan/Zhelatin variant
    Winlogon NotifyA3dxqX%SYSDIR%\a3dx8.dll Troj/Xorpix-Z
    Winlogon Notifyackpbsc , acautsrvL%SYSDIR%\ackpbsc.dll Actividentity
    Winlogon NotifyACNotifyLACNotify.dll Access_Connections
    Winlogon NotifyActiveSyncLWcesWlgn.dll ActiveSync
    Winlogon NotifyacunlockL%ProgramFiles%\ActivIdentity\ActivClient\acunlock.dll Actividentity
    Winlogon NotifyaeskapX%SYSDIR%\aeskap.dllHaxdoor variant
    Winlogon Notifyagpbrdg0Xagpbrdg0.dll Troj/Banker-DMN
    Winlogon NotifyalcomtX%SYSDIR\alcomt.dll Goldun_variant
    Winlogon NotifyalcoptX%SYSDIR%\alcopt.dll Haxdoor_variant
    Winlogon NotifyAntiwpaX%SYSDIR%\antiwpa.dllIllegal Windows crack
    Winlogon NotifyApp Management, App Paths, Applets, BITS, Control
    Panel, Controls Folder, CSCSettings, DateTime, Dynamic
    Directory, Explorer    		Xrandom named dll in the System32 folderVariant of Adware.Look2Me
    Winlogon Notifyarm32regXDocuments\Settings\arm32.dll Troj/Xorpix-F
    Winlogon Notifyarprmdg0Xarprmdg0.dll Troj/Haxdoor-DI
    Winlogon Notifyartm_newregXDocuments and Settings\All Users\Documents\Settings\artm_new.dll Trojan-Proxy.Win32.Xorpix
    Winlogon Notifyasusrx20Xasusrx20.dll Troj/Haxdoor-CZ
    Winlogon NotifyataswlLataswl.dll Webex
    Winlogon Notifyati2kaagX%SYSDIR%\ati2kaag.dllGoldun variant
    Winlogon Notifyati2krtgX%SYSDIR%\ati2krtg.dllGoldun variant
    Winlogon NotifyatiddaxxXatiddaxx.dllGoldun variant
    Winlogon NotifyatietaxxXatietaxx.dllGoldun variant
    Winlogon NotifyatixdaxxXatixdaxx.dllGoldun variant
    Winlogon NotifyatixdbxxXatixdbxx.dllGoldun variant
    Winlogon NotifyatmgrtokLatmgrtok.dll IBM
    Winlogon NotifyaudmgrX%SYSDIR%\audmgr32.dll W32/Stratio-BW
    Winlogon NotifyavgwlntfLavgwlntf.dll AVG
    Winlogon NotifyavldrLavldr.dllPanda Titanium 2006 Antivirus
    Winlogon Notifyavload32Xavload32.dll Haxdoor.gj
    Winlogon Notifyavpe32Xavpe32.dll Haxdoor
    Winlogon Notifyavpu32Xavpu32.dll Troj/Haxdoor-ED
    Winlogon Notifyavpx32Xavpx32.dll Haxdoor
    Winlogon NotifyAwayNotifyL%Program Files%\Lenovo\AwayTask\AwayNotify.dll Lenovo/IBMTools
    Winlogon NotifyawtqqXawtqq.dllSpyware.Virtumonde variant
    Winlogon NotifyaxdebuglXaxdebugl.dll TR/PSW.PdP.CT.1.E.3
    Winlogon NotifyblurX%SYSDIR%\[random named].dllTrojan-Downloader.Win32.Small.esa
    Winlogon NotifybmtdhhXbmtdhh.dll Haxdoor
    Winlogon NotifybnregXC:\Documents and Settings\All Users\Documents\Settings\bn.dll Trojan-Proxy.Win32.Xorpix.Fam
    Winlogon Notifybootrom8X%SYSDIR%\bootrom8.dll Goldun_variant
    Winlogon NotifybotregXbot.dll, partneship.dll, dn.dll in %All Users%\Documents\Settings Xorpix-variant
    Winlogon NotifybrowselaXbrowsela.dllTrojan.Downloader.Delf variant
    Winlogon NotifybrwmgrXbrwmgr32.dll WORM_STRAT.EF
    Winlogon Notifybt848romXbt848rom.dll Troj/Goldun-CW
    Winlogon NotifyCaveoLCaveoSVR.DLL Caveo
    Winlogon Notifycdscsix3Xcdscsix3.dllGoldun variant
    Winlogon Notifycfgmngr32, hk.dll, cfgmngr321.dllXcfgmngr32.dllTrojan.Downloader.Delf variant
    Winlogon NotifyckpNotifyLckpNotify.dllCheckPoint Security
    Winlogon NotifyCMGShieldNPL\CMG Shield\CMGShieldNP.dll Credant
    Winlogon NotifyCommand AntiVirus DownloadLCommand AntiVirus Download.dllCommand AntiVirus
    Winlogon NotifyComPlusSetupLcatsrvut.dllPart of Microsoft ComPlus
    Winlogon NotifyConMainXConMain.dat Troj/Bdoor-CPK
    Winlogon NotifycrehcjidX%SYSDIR%\crehcjid.dll Lockspy_aka_Pharvest_Worm
    Winlogon NotifycryptX%SYSDIR%\crypts.dll Downloader-BAR
    Winlogon Notifycrypt32netXcrypt32net.dll Troj/Banworm-H
    Winlogon NotifycryptaXcryptsa.dll Downloader-BAR
    Winlogon NotifycryptimgX%SYSDIR%\cryptimg.dll Trojan/Backdoor
    Winlogon NotifyCwWLEventLcwplc001.dll Content_Watch
    Winlogon NotifydavctoolXdavctool.dll Stration/Warezov
    Winlogon NotifyddirectzXddirectz.dll Troj/Haxdoor-BS
    Winlogon NotifydebuggXdebugg.dll Troj/Haxdoor-AC
    Winlogon NotifyDeviceNPL%SYSDIR%\DeviceNP.dll Hewlett-Packard
    Winlogon NotifyDfLogonLLogonDll.dll DeepFreeze
    Winlogon NotifydimsntfyLdimsntfy.dllSystem file in Windows 2003 SP1
    Winlogon NotifydirectptXdirectpt.dll Troj/Haxdoor-AX
    Winlogon NotifydirectutXdirectut.dllGoldun variant
    Winlogon NotifydivxpsX%SYSDIR%\divxps.dllHaxdoor variant
    Winlogon NotifydivxrsX%SYSDIR%\divxrs.dll Haxdoor
    Winlogon Notifydocent0Xdocent0.dllLogger.Goldun variant (malware)
    Winlogon Notifydocent2Xdocent2.dllTrojan.PWS.GoldSpy variant
    Winlogon Notifydpl1npwmXdpl1npwm.dll Warezov/Stration-NZ
    Winlogon NotifyDPWLNLDPWLEvHd.dllDigitalPersona fingerprint reader
    Winlogon Notifydrct16Xdrct16.dll Haxdoor
    Winlogon Notifydrtw3aXdrtw3a.dll Haxdoor
    Winlogon Notifydvb03a and other ****3a (**** = random)X****3a.dll Haxdoor
    Winlogon Notifydvd4freeXdvd4free.dllTrojan/Spy.Goldun.de.1
    Winlogon NotifydxmamciaX%SYSDIR%\dxmamcia.dllStration/Warezov variant
    Winlogon NotifyEESPLeelsto.dllEntrust® Entelligence Login
    Winlogon NotifyeetvpnXeetvpn.dll Troj/Haxdoor-DL
    Winlogon NotifyefccddaX%SYSDIR%\efccdda.dll Troj/Agent-GAU
    Winlogon NotifyEFSL%SYSDIR%\sclgntfy.dllSecondary Logon Service Notification
    Winlogon NotifyEMClientL%SYSDIR%\EntWinlogon.dll Spyware_Doctor_Enterprise_Client
    Winlogon NotifyemldvcXemldvc.dllGoldun variant
    Winlogon Notifyemul65Xemul65.dllHaxdoor variant
    Winlogon NotifyeventssXatmpvc.dll Troj/Festod-A
    Winlogon NotifyewsmsgX%SYSDIR%\ewsmsg.dll Haxdoor
    Winlogon NotifyexplorerXexplorer.dll Troj/SCLog-B
    Winlogon NotifyExtensions, H323TSP, Hints, Installer, Internet
    Settings, IPConfTSP, Media Center, MediaContentIndex,
    ModuleUsage    		Xrandom named dll in the System32 folderVariant of Adware.Look2Me
    Winlogon NotifyextfpuXextfpu.dllGoldun variant
    Winlogon NotifyextxeroxXextxerox.dllGoldun variant
    Winlogon Notifyf3dslXMSplg7.dll Troj/Goldun-R
    Winlogon NotifyfanxctrlXfanxctrl.dllGoldun variant
    Winlogon NotifyfeclipnaX%SYSDIR%\feclipna.dll W32/Stration-G
    Winlogon NotifyflashdmaX%SYSDIR%\flashdma.dll Goldun
    Winlogon NotifyflashdrvrXflashdrvr.dll Troj/Haxdoor-BX
    Winlogon NotifyFLWLEventsLFiberlinkNetProv.dll FIBERLINK
    Winlogon NotifyFolderGuardLFGuard32.dll FolderGuard
    Winlogon Notifyfsp_abwlL%SYSDIR%\fsp_abwl.dll Access_Boss
    Winlogon Notifyg, gg, gggg, gggggg, gsXadsldpbd.dllTrojan-Downloader.Win32.Delf variant - CoolWebSearch
    Winlogon NotifygatexkeyXgatexkey.dllHaxdoor variant
    Winlogon NotifygatwxkeyXgatwxkey.dllGoldun variant
    Winlogon NotifyGbPluginAbnL%PROGRAMFILES%\GbPlugin\gbiehabn.dll G-Buster_Browser_Defense
    Winlogon NotifyGbPluginBbL%PROGRAMFILES%\GbPlugin\gbieh.dll G-Buster_Browser_Defense
    Winlogon NotifygdiwxpXgdiwxp.dllGoldun variant
    Winlogon NotifygdowxpXgdowxp.dllGoldun variant
    Winlogon Notifygdwxp3Xgdwxp3.dllGoldun variant
    Winlogon NotifyGoToAssistLG2AWinLogon. dllCitrix GoToAssist
    Winlogon NotifyGoToMyPCLG2WinLogon.dll GoToMyPC
    Winlogon NotifyGuardianXmsg***.dll (*=a number)http://sarc.com/avcenter/venc/data/adware.look2me.html
    Winlogon NotifyGuardianCXYHNX%SYSDIR%\6po4svc.dll Zestyfind
    Winlogon Notifyh618, h619X%SYSDIR%\g*******.dll (*******= random numbers usually 6-10)Win32Delf Trojan variant
    Winlogon NotifyhobbatoolXhobbatool.dllSC-KeyLog variant
    Winlogon NotifyhpprintxXhpprintx.dll Troj/Haxdoor-AU
    Winlogon NotifyhtprocXhtproc32.dllTrojan.Psw.Lineage variant
    Winlogon NotifyicmuwmauX%Sysdir%\icmuwmau.dll W32/Stratio-E
    Winlogon Notifyideusr50Xideusr50.dllGoldun variant
    Winlogon Notifyies4dllXies4dll.dllGoldun variant
    Winlogon Notifyiesdl4lXiesdl4l.dll Troj/Haxdoor-AQ
    Winlogon NotifyiexploreX******.dll (* + random character) Troj/Dloader-EW
    Winlogon NotifyiexplorerX%SYSDIR%\iexplorer.dll Troj/SCLog-AI
    Winlogon NotifyIfxWlxENLIfxWlxEN.dllInfineon TPM Software
    Winlogon NotifyigfxcuiLigfxsrvc.dllIntel(R) integrated graphics controller
    Winlogon NotifyigfxcuiOigfxdev.dllIntel(R) integrated graphics controller
    Winlogon NotifyigfxculLigfxsrvc.dllIntel(R) integrated graphics controller
    Winlogon NotifyinstcatX%SYSDIR%\instcat.dllnot yet identified malware
    Winlogon NotifyIntelWirelessLLgNotify.dllAssociated with the Intel PRO/Set Wireless software
    Winlogon NotifyIntlRunXrandom named dll in the System32 folderVariant of Adware.Look2Me
    Winlogon NotifyisodvrtgX%SYSDIR%\isodvrtg.dllGoldun variant
    Winlogon NotifyjgsdrpcnXjgsdrpcn.dllW32.Stration.DE@ mm
    Winlogon Notifyke32paagX%SYSDIR%\ke32paag.dll Goldun
    Winlogon NotifyklogonLklogon.dllKaspersky AVP6
    Winlogon NotifyksapghX%SYSDIR%\ksapgh.dllGoldun variant
    Winlogon NotifylanmuiXlanmui.dll Backdoor.Win32.Haxdoor.hb
    Winlogon NotifyLavasoftStartupCleanerOvx2cleaner.dlxLeftover of Lavasoft VX2Cleaner
    Winlogon NotifyLBTServLlbtserv.dll Logitech_Bluetooth
    Winlogon NotifyLBTWlgnL%common files%\logitech\bluetooth\LBTWlgn.dll Logitech_Bluetooth
    Winlogon Notifyldr64Xldr64.dll Mitglieder.HT
    Winlogon Notifylgn1216aXlgn1216a.dll Haxdoor
    Winlogon NotifylinkerregXDocuments and Settings\All Users\Documents\Settings\linker.dllXorpix variant
    Winlogon NotifyLMIinitLLMIinit.dllLogMeIn Remote Control Helper
    Winlogon NotifyLogCryptX%SYSDIR%\LogCrypt.dll TROJ_DIEHARD_variant
    Winlogon NotifyloginkeyLloginkey.dllMicrosoft Tablet PC Platform component
    Winlogon Notifylogon032Xlogon032.dll Goldun_variant
    Winlogon Notifylogon16xXlogon16x.dllSpy.Goldun variant
    Winlogon NotifylogonsXredist.dll Troj/Dloadr-UY
    Winlogon Notifyloky2regX%All Users Dokument%\Settings\loky2.dllTrojan-Spy.Win32.Banker variant
    Winlogon Notifylsd_f3Xlsd_f3.dll Troj/Banker-EX
    Winlogon NotifymcfCC4XmcfCC4.dll W32.Starimp
    Winlogon NotifymcfG7AXmcfG7A.dll Troj/Haxdoor-AK
    Winlogon NotifyMCPClientLmcpstub.dllStardock WindowBlinds
    Winlogon Notifymd4hshX%SYSDIR%\md4hsh.dllGoldun variant
    Winlogon NotifymdfproXmdfpro.dllGoldun variant
    Winlogon NotifyMetaFrameLctxnotif.dllCitrix Metaframe
    Winlogon Notifymloader32Xmloader32.dll Mitglieder.HT
    Winlogon NotifymmcdllXmmcdll.dllGoldun variant
    Winlogon Notifymms400Xmms400.dll Troj/Conhook-AF
    Winlogon Notifymmx17gXmmx17g.dllHaxdoor variant
    Winlogon Notifymmx432Xmmx432.sysAdded by the Goldun.J TROJAN! Read the link, rootkit type stealth involved.
    Winlogon NotifymmxeroxkXmmxeroxk.dllGoldun variant
    Winlogon NotifymonlnL%SYSDIR%\monln.dll Comodo
    Winlogon Notifymp3res.dllX%SYSDIR%\mp3res.dll Haxdoor
    Winlogon Notifymplink.dllX%SYSDIR%\mplink.dll Haxdoor
    Winlogon NotifyMS-DOS Emulation, Nls, OemStartMenuData, OfficeUpdate,
    OptimalLayout, policies, Reinstall, Reliability    		Xrandom named dll in the System32 folderVariant of Adware.Look2Me
    Winlogon Notifymsctl32.dllXmsctl32.dllSpamTool.Win32.Mailbot
    Winlogon Notifymsdtc32X%SYSDIR%\msdtc32.dllTrojan-Downloader.Win32.Small.hoa
    Winlogon NotifymsjtwinrXmsjtwinr.dllWarezov/Stration variant
    Winlogon NotifyMsMsSrvXMsMsSrv.DLL Trojan.WinlogonHook.Delf.A
    Winlogon NotifymsupdateXmsupdate32.dll TR/Proxy.Delf.AL
    Winlogon Notifymsv1_1X%SYSDIR%\msv1_1.dll W32/RecyInf-A
    Winlogon Notifymszsrn32Xmszsrn32.dll Banwarum/W32/Zasran-D
    Winlogon NotifyNavLogonLNavLogon.dllNorton AntiVirus
    Winlogon NotifynclabydllXnclabydll.dllGoldun variant
    Winlogon NotifyNetIdentity NotificationLXtNotify.dllNovell NetIdentity
    Winlogon NotifynkunpackXnkunpack.dllGoldun variant
    AppInit_DLLsnslookup.dllX%SYSDIR%\nslookup.dll ClickSpring.PuritySCAN
    Winlogon NotifyNTvsxXNTvsx.dllPassword stealing trojan
    Winlogon NotifynucdrvdllXnucdrvdll.dllGoldun variant
    Winlogon NotifynuclabdllXnuclabdll.dllGoldun variant
    Winlogon Notifynvsystl0X%SYSDIR%\nvsystl0.dll Goldun
    Winlogon NotifynwprovauLnwprovau.dllClient Service for NetWare
    Winlogon Notifyobbf115Xobbf115.dll Goldun
    Winlogon Notifyobbn13tXobbn13t.dllGoldun variant
    Winlogon NotifyOdysseyClientLodyEvent.dll Odyssey_Client
    Winlogon NotifyOneCardLAsWlnPkg.dll Cognizance_Security
    Winlogon NotifyopenglssXopenglss.dll Troj/Haxdoor-BE
    Winlogon NotifyopenglwxXopenglwx.dll TSPY_GOLDUN.EI
    Winlogon NotifyOPXPGinaLopxpgina.dllSecure Password Management
    Winlogon NotifyovrscnX%SYSDIR%\ovrscn.dllHaxdoor variant
    Winlogon Notifyp2pnkbdlX%SYSDIR%\p2pnkbdl.dll W32/Stration-AT
    Winlogon NotifypartnershipregXpartnership.dllTrojan-Proxy.Win32.Xorpix variant
    Winlogon NotifypasksaXpasksa.dll Haxdoor
    Winlogon NotifyPCANotifyLPCANotify.dll pcAnywhere
    Winlogon NotifypcsinstLpcsinst.dll IBM
    Winlogon NotifyPermissionResearchX%SYSDIR%\prls.dll PermissionResearch
    Winlogon NotifyPFWLUmxWnp.DllTiny Personal Firewall
    Winlogon NotifyPixVueLWinLogon.DLL PixVue
    Winlogon NotifypolymorphregXpolymorph.dll Troj/Small-BNO
    Winlogon NotifyppecltLPPEClt.dllANIXIS Password Policy Enforcer
    Winlogon Notifypptp16Xpptp16.dllHaxdoor variant
    Winlogon Notifypptp32Xpptp32.dllHaxdoor variant
    Winlogon Notifyprintpn2Xprintpn2.dll Goldun_variant
    Winlogon NotifyprintpnpXprintpnp.dllGoldun variant
    Winlogon NotifyPRISMAPI.DLLLPRISMAPI.DLLWireless D-link DWL-G120 USB Adapter Prism54 Driver
    Winlogon NotifyPRISMGNA.DLLLPRISMGNA.DLLWireless D-link DWL-G120 USB Adapter Prism54 Driver
    Winlogon NotifyprtsksXprtsks.dll Haxdoor_variant
    Winlogon NotifyprwsksXprwsks.dllGoldun variant
    Winlogon NotifypsfusLpsfus.dll Protector_Suite
    Winlogon NotifypsfusLpsqlpwd.dll Protector_Suite
    Winlogon NotifypsfusLfusstub.dll Protector_Suite
    Winlogon NotifypsksdsXpsksds.dllHaxdoor variant Goldun
    Winlogon NotifyPSUTYL%SYSDIR%\PSUWNP.dll Fujitsu
    Winlogon Notifypx86emulX%SYSDIR%\px86emul.dll Goldun
    Winlogon NotifyQConGinaLQConGina.dllIBM Access Connections GINA
    Winlogon NotifyqhdtvvXqhdtvv.dll Troj/Goldun-FI
    Winlogon NotifyRAinitLRAinit.dll RemotelyAnywhere
    Winlogon Notifyrandom nameXrandom name spelled backwards.datCATLEvents vriant of Adware.VirtuMonde
    Winlogon Notifyrandom name compiled from elements taken from a listX(same) random name.dll Vundo.B
    Winlogon NotifyrdrVR2XrdrVR2.dll Troj/Haxdoor-AJ
    Winlogon NotifyRegCompactLRegCompact.dllAMUST Registry Cleaner
    Winlogon Notifyrege2usbXrege2usb.dllGoldun variant
    Winlogon NotifyreqXreq.dat Troj/Bdoor-CPK
    Winlogon NotifyreqXreq.dll Troj/ConHook-B
    Winlogon Notifyreset5Oreset5.dllIllegal, but usually installed by user
    Winlogon Notifyrlx51domXrlx51dom.dllGoldun variant
    Winlogon Notifyrlx5dom1Xrlx5dom1.dllGoldun variant
    Winlogon Notifyrmk8otXrmk8ot.dllHaxdoor variant