CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O21 ShellServiceObjectDelayLoad

Currently 237 entries and growing...
Last updated on 2008-06-02 04:41:03 Eastern.


FBJ originally ran this list but closed it permanently. FBJ graciously permitted CastleCops to continue maintaining the list as of Jul 8, 2005. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    CLSIDStatusNamePath/FileDescription
    {********-****-****-****-************}Xhostctrl%WINDIR%\hostctrl.dll SmitFraud
    {********-****-****-****-************}Xhstsys%WINDIR%\hstsys.dll Smitfraud
    {7b1eeccd-0a6d-4ad5-8ac1-4af5722b3885}Xhubbsivwlummc.dllSmitfraud variant
    {********-****-****-****-************}Xhupsrv%WINDIR%\hupsrv.dll SmitFraud
    {b166be07-30a4-4d38-b781-44528a630706}Xhydrodictyongqagksr.dll SmitFraud/SpySheffif
    {1799460C-0BC8-4865-B9DF-4A36CD703FF0}LIconPackager Repairiprepair.dllStardock\Object Desktop\ ThemeManager
    {********-****-****-****-************}Xiebrowseriebrowser.dll Smitfraud
    {********-****-****-****-************}Xiecontextiecontext.dll Smitfraud
    {********-****-****-****-************}Xiedebugiedebug.dll Smitfraud
    {********-****-****-****-************}XIEFilter%SYSDIR%\IEFilter.dll Troj/SrchSpy-A
    {********-****-****-****-************}Xiesupportiesupport.dll Smitfraud
    {bb720bab-2f75-456b-a850-04d77b20f6b8}Ximpasserosdzop.dll SmitFraud/SpySheffif
    {03413bf7-e34c-445b-bfc0-a2b127255871}Xincestuouslyurroxtl.dllSmitfraud variant
    {11F1576E-3AB4-439A-A5C9-4D77B4087863}XInternet Agent[random].dll Troj/PPdoor-J
    {F28A40D7-AD0E-034A-C651-5F0ED76232E6}XInternet Explorer%System%\[RANDOM NAME].dll Backdoor.Berbew.T
    {********-****-****-****-************}Xjetctrl%WINDIR%\jetctrl.dll Smitfraud
    {c6e9c531-af10-4639-bcd8-21e3520441a1}XKbdBoot%WINDIR%\Installer\{c6e9c531-af10-4639-bcd8-21e3520441a1}\KbdBoot.dll SmitFraud
    {A3023D18-B93F-4892-B89B-56FB36382B8F}Xkbdctrl%WINDIR%\kbdctrl.dll SmitFraud
    {********-****-****-****-************}XKbdRom KbdSrv KernelAlrt KernelBoot KernelComponent
    KernelDrv KernelMon KernelPrx KernelSrv KernelSys
    KernelUnknown
    %WINDIR%\Installer\{********-****-****-****-************}\[name].dllTrojan.Win32.Agent (browser hijacker)
    {000000A0-0000-0000-0000-000000000011}XKeysaver%System%\Keysaver.dll Trojan-Dropper.Win32.Small
    {********-****-****-****-************}Xkopmet%WINDIR%\kopmet.dll Smitfraud
    {71EC5123-28DF-324A-D76B-32549AB4C338}XLDpswSend%SYSDIR%\[random named].dllTrojan-Downloader.Win32.Agent
    {********-****-****-****-************}Xleorop%WINDIR%\leorop.dll Smitfraud
    {********-****-****-****-************}XLiveUpdatec:\program files\symantec\(liveupdate\)[random].dllUnidentified malware
    {C222CF73-124F-3562-44AC-E685D962C63C}XMailExport%WINDIR%\Media\sendmail.dll Trojan.Win32.BHO.gb
    {523455E4-ABCD-ABCD-1114-D709ADD3DDAB}XMemManMemMan.dll Troj/Goldun-EH
    {79FEACFF-FFCE-815E-A900-316290B5B738}XMicrosoft DirectXb[random].dll Troj/Padodor-L
    {********-****-****-****-************}Xmjdw32_mjd.dllIRCBot-Mygallery
    {********-****-****-****-************}Xmodemsnotice.dll Win32.Backdoor.IRCBot
    {********-****-****-****-************}XMonAlrt MonBoot MonRam monvolume prxboot RamChk
    RamRunOnce RamSys RamUnknown RomCheck
    %WINDIR%\Installer\{********-****-****-****-************}\[name].dllTrojan.Win32.Agent (browser hijacker)
    {********-****-****-****-************}XMonWin%WINDIR%\Installer\{********-****-****-****-************}\MonWin.dllTrojan.Win32.Agent
    {********-****-****-****-************}Xmsddemsdde.dll Smitfraud
    {********-****-****-****-************}Xmsddxmsddx.dll Smitfraud
    {********-****-****-****-************}Xmsmdev%WINDIR%\msmdev.dll Smitfraud
    {********-****-****-****-************}Xmsmduo%WINDIR%\msmduo.dll Smitfraud
    {********-****-****-****-************}Xmsmduo2%WINDIR%\msmduo2.dll Smitfraud
    {********-****-****-****-************}Xmsmhost%WINDIR%\msmhost.dll Smitfraud
    {280A7B65-8F00-438F-3E5A-1F039433FE60}XMSN Messengerdssdll32.dllTrojan horse Downloader.Agent
    {35CEC8A3-2BE6-11D2-8773-92E220524250}XMsnShell32%SYSDIR\MsnShell32.dllBackdoor.Win32.Agent.gkf (Zlob variant)
    {********-****-****-****-************}Xmsolemsole.dll Smitfraud
    {8EBB4EC4-DD60-E1B1-E00E-DA54CCE9218D}Xmspc32.dllmspc32.dll W32/Feebs-J
    {********-****-****-****-************}Xmsqnx%windir%\msqnx.dll Smitfraud
    {********-****-****-****-************}Xmssql%WINDIR%\mssql.dll Smitfraud
    {6F9DD472-2CC4-459A-A620-70D75E53E35E}XMStaskp2sys.dllTrojan-PSW.Win32.LdPinch variant
    {********-****-****-****-************}Xmsvb%WINDIR%\msvb.dll Smitfraud
    {0D13BB81-D4DB-B06F-0AAF-613A52E287C3}Xms[random characters]32.dllms[random characters]32.dll W32/Feebs-BA
    {********-****-****-****-************}Xmtkle******32.dll Win32.Blewfit.A
    {5D1C9A4F-438B-4C5C-BE66-FAAA08D4BF49}Xneobus%WINDIR%\neobus.dll SmitFraud
    {********-****-****-****-************}Xnopctrl%WINDIR%\nopctrl.dll Smitfraud
    {********-****-****-****-************}Xnopzet%WINDIR%\nopzet.dll Smitfraud

    Engine Version 2.0 by CastleCops

    spacer spacer