CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O21 ShellServiceObjectDelayLoad

Currently 240 entries and growing...
Last updated on 2008-07-27 10:02:23 Eastern.


FBJ originally ran this list but closed it permanently. FBJ graciously permitted CastleCops to continue maintaining the list as of Jul 8, 2005. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    CLSIDStatusNamePath/FileDescription
    {********-****-****-****-************}Xnopctrl%WINDIR%\nopctrl.dll Smitfraud
    {********-****-****-****-************}Xnopzet%WINDIR%\nopzet.dll Smitfraud
    {********-****-****-****-************}XNTDBGTOOL*******.dll (* =random letter) Troj/PPdoor-C
    {********-****-****-****-************}Xocgrep%WINDIR%\ocgrep.dll Smitfraud
    {70BC2408-9E0E-47A4-8B46-BDA634995AA9}Xodb_setodbcmr32.dll Troj/Spy-UL
    {0656A137-B161-CADD-9777-E37A75727E78}XOLE Modulethun32.dll Backdoor.Fivsec
    {********-****-****-****-************}XOLE Objectbarseek.dllTrojan-Proxy.Win32.Small
    {C777CF73-124F-3562-44AC-E685D962C63C}XOleExport%WINDIR%\Media\CertMgr.dllTrojan.Win32.BHO.gb
    {********-****-****-****-************}Xossmartossmart.dll AdWare.Win32.Agent
    {********-****-****-****-************}Xpmkretpmkret.dll Smitfraud
    {********-****-****-****-************}XPreBootCheck%WINDIR%\Resources\[random name].dll Smitfraud
    {********-****-****-****-************}Xprintersnotiffy.dll, msn.dll, libcintles3.dll W32/Kik-A
    {********-****-****-****-************}Xprinterslibwinets.dll Troj/IRCBot-XD
    {********-****-****-****-************}Xprinterslibmsns.dll W32/IRCBot-XG
    {********-****-****-****-************}Xprinterslibweb.dll W32/Dabber-D
    {448BAC42-AABD-42C5-A550-826BF4AF4BB3}Xprodigy1prodigys323.dll Mimbot.A
    {********-****-****-****-************}Xprodigy1newsystem25.dll Mimbot.A
    {ee12547f-4a79-494f-be6d-14fc2f037713}XPrxDrive%WINDIR%\Installer\{ee12547f-4a79-494f-be6d-14fc2f037713}\PrxDrive.dll SmitFraud
    {********-****-****-****-************}Xrdihost%SYSDIR%\rdihost.dll W32/IRCBot-VR
    {5344BB88-3DE1-409F-8307-C85923A1F4DD}Xrdshostrdfhost.dll W32/IrcWorm-A
    {FAD81399-F9B1-95E0-B45E-956A216893A0}XRealJukebox 1.0SpeechEngines.dllTrojan-Downloader.Win32.Murlo.a
    {********-****-****-****-************}Xrmvgor%WINDIR%\rmvgor.dll Smitfraud
    {ff24a0f4-b93e-4b4b-9bfb-e398e98db703}XRomAvpRomAvp.dll Smitfraud
    {********-****-****-****-************}XRomMon RomPrx RomSrv RomUnknown RunOnceAlrt
    RunOnceSetup RunOnceVolume ServiceCD ServiceComponent
    %WINDIR%\Installer\{********-****-****-****-************}\[name].dllTrojan.Win32.Agent (browser hijacker)
    {********-****-****-****-************}Xsapnet%WINDIR%\sapnet.dll Smitfraud
    {********-****-****-****-************}XServicePrx ServiceRam ServiceRom ServiceSys SetupAlrt
    SetupMon SetupService SrvAlrt SrvCheck
    %WINDIR%\Installer\{********-****-****-****-************}\[name].dllTrojan.Win32.Agent (browser hijacker)
    {8FB2D6CA-E258-48CF-9DAB-EEFB735E225C}XshellserviceShellService.dll Spyware.Ultraview
    {********-****-****-****-************}Xsounddrv%WINDIR%\sounddrv.dll Smitfraud
    {********-****-****-****-************}XSrvComponent SrvSetup SrvUnknown SysDrive SysService
    SysSys UnknownKbd UnknownCD UnknownDrive UnknownKernel
    %WINDIR%\Installer\{********-****-****-****-************}\[name].dllTrojan.Win32.Agent (browser hijacker)
    {********-****-****-****-************}XSvcSyssvcsys.dll Infostealer.Bancos
    {6CBCB0E8-BAAD-4450-AF88-CE02C567AC36}XSvrpnpgeteng.dll Spyware.Eblaster
    {********-****-****-****-************}Xsyscore%WINDIR%\syscore.dll Smitfraud
    {23456789-0000-0020-0900-00AAFF6D2EA4}XSysctl Desktop Handlerntosv.dll Troj/Agent-CL
    {********-****-****-****-************}Xsysdx%WINDIR%\sysdx.dll Smitfraud
    {********-****-****-****-************}Xsyshelps%SYSDIR%\syshelps.dll, wmhs32.dll Troj/IRCBot-WL
    {********-****-****-****-************}Xsyshelpssystesrt32.dll W32/IRCBot-XF
    {********-****-****-****-************}Xsyshostssyshosts.dllhttp://www.sophos.com/security/analyses/w32ircbotwb.html
    {D7FFD784-5276-42D1-887B-00267870A4C7}XSysRunsvshost.dll Troj/Small-CPO
    {********-****-****-****-************}XSystemvr_sys.dll Troj/LdPinch
    {********-****-****-****-************}Xsystem32sysprinters.dll W32/IRCBot-WV
    {54645654-2225-4455-44A1-9F4543D34545}XSystemCheck2vbsys2.dll Troj/AdClick
    {********-****-****-****-************}Xsystemiesystemie.dll Troj/Sisie-D
    {********-****-****-****-************}Xsystempsystemp.dll Troj/Narod-D
    {35CEC8A3-2BE6-11D2-8773-92E220524153}LSysTray%SYSDIR%\stobject.dllSysTray Shell Service Object Library
    {6368D1FC-6F5C-4f1b-B164-E67214F678E9}XSysTray.Exbr[random].dll Troj/Slogger-I
    {5368D5FC-6F6C-4f5b-B564-E67214F67552}XSysTray.Exbt[random].dll Troj/Slogger-K
    {1722ECFF-4356-4f5b-B534-E67294FE75E9}XSysTray.Excn[random].dllWorm.Prox.c
    {1722ECFF-4356-4f5b-B534-E67294FE75E9}XSysTray.Excn2[random].dll Troj/Cozdoor-C
    {636821FC-6F5C-2f1b-B164-E67214F678E2}XSysTray.Exgl[random].dllTrojan-Proxy.Win32.Small variant
    {2963ECFC-4E5C-2f3b-B334-D67434FC72E0}XSysTray.Exiv[random].dll Troj/Slogger-F

    Engine Version 2.0 by CastleCops

    spacer spacer