| File Name | State | Description |
| 1_clientnspprj.dll | V | Sinfor SSL Client Component (Chinese) |
| A2antispamlsp.dll | V | A-Squared Anti-Spam - http://www.emsisoft.com/en/software/download/ |
| Abcdefgh.dll | M | Trojan.SexSearch-Unknown/LSP - http://www.fileresearchcenter.com/A/ABCDEFGH.DLL-10503.html a/k/a AdWare.Win32.Agent.ci |
| Adlsp.dll | V | Allume (f/k/a Aladdin) Systems Internet Cleanup , http://www.allume.com/win/cleanup/index.html |
| Aelupsvc32.dll | M | Rogoo Hijacker (Chinese) |
| Agbfilt.dll | V | Antiy Ghostbusters security utility , http://www.antiy.net |
| Aklsp.dll | M | Virtumundo / AdKnowledge |
| Antiyfilter.dll | V | Antiy Ghostbusters security utility - http://www.antiy.net |
| Anywall3.dll | U | Related to an unidentified firewall, possibly something called Incops3? |
| Ao2lsp.dll | V | AdsOff 2 Ad Filter (no longer supported) , http://www.pcworld.com/downloads/file_description/0,fid,6182,00.asp |
| Aolsp.dll | U | Older version of AdsOff Ad Filter (no longer supported)?, http://www.pcworld.com/downloads/file_description/0,fid,6182,00.asp |
| Aphish.dll | V | Phishing Sweeper anti-phishing software - http://www.malwareremover.com/phishingsweeper.html |
| Aplsp.dll | M | AdPartner adware , http://www.pestpatrol.com/pestinfo/a/adpartner.asp |
| Apptoport.dll (1)* | V | WyvernWorks Firewall - http://www.wyvernworks.com/firewall.html |
| Apptoport.dll (2)* | M | (See previous entry) Added by "rogue" anti-spyware programs - BPS Spyware & Adware Remover, Adwareremovergold, and possibly others |
| Asdns.dll | V | Aventail Corporation VPN , http://www.aventail.com |
| Asiclayer.dll | M | EAnthology/StopSign Acceleration Software , http://www.pestpatrol.com/PestInfo/S/StopSign.asp |
| Aslsp.dll | V | Aventail Corporation VPN , http://www.aventail.com |
| Asnsp.dll | V | Aventail Corporation VPN , http://www.aventail.com |
| Avgfwafu.dll | V | AVG Antivirus Plus Firewall - http://www.grisoft.de/doc/AvgPlusFw/lng/us/tpl/tpl01 |
| Avmail.dll | U | Possibly related to a version of WinAntivirus, a "rogue" antivirus program that uses deceptive techniques to encourage purchase. See Mailscan.dll entry for further details on WinAntivirus. |
| Avsda.dll | V | AntiVir Antivirus related , http://www.hbedv.com/en |
| Betsp.dll | V | Aventail Corporation VPN - http://www.aventail.com |
| Biolsp.dll | V | Wave Embassy Trust Suite - http://www.wave.com/products/ets.html |
| Bmi_lsp.dll | V | Bytemobile Macara Connection Optimizer (seems to be installed in connection with Sprint PCS Connection Manager) , http://www.bytemobile.com/html/Client_products.html |
| Bmnet.dll | V | Bytemobile Optimization Client related - http://www.bytemobile.com/html/Client_products.html |
| Bnmndrv.dll | U | Appears mostly in logs in Polish, possibly related to a program called Tguard? |
| Calsp.dll | M | CouponAge |
| Caslsp.dll | V | Comodo AntiSpam - http://www.comodoantispam.com/ |
| Cavemlsp.dll | V | Comodo Antivirus Email Scanner Module - http://antivirus.comodo.com/ |
| Cdlsp.dll | M | CouponDeals |
| Cdnns.dll | V | Related to CNNIC, a Chinese internet service provider |
| Cespy.dll | D | Covenant Eyes "internet accountability" software. Surveillance software that tracks all activities, logs keystrokes, etc. Verify whether knowingly installed by the user, http://www.covenanteyes.com/about.php |
| Clientnspprj.dll | V | Sinfor SSL Client Component (Chinese) |
| Cnmib.dll | M | CommonName , http://www.doxdesk.com/parasite/CommonName.html |
| Cn_api60.dll | M | BKDR_PCCLIENT.PA (Chinese) - http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR%5FPCCLIENT%2EPA&VSect=P |
| Cn_spi32.dll | M | Troj/PWS-ADV - http://www.sophos.com/security/analyses/trojpwsadv.html |
| Cn_spiex.dll | M | TSPY_AGENT.EBQ - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FAGENT%2EEBQ&VSect=Td |
| Connwsp.dll | V | Pure Networks Port Magic or related , http://www.purenetworks.com/products |
| Cplsp.dll | V | SurfControl Web & Email Content Filtering , http://www.surfcontrol.com |
| Csesck32.dll | V | Fortis Bank Secure Layer , http://www.onlinebanking.fortisbank.nl |
| Csloa.dll | M | MarketScore , http://www.doxdesk.com/parasite/MarketScore.html |
| Cslsp.dll | V | McAfee Antivirus , http://www.mcafee.com |
| Cssp.al | V | Broadway Socket Filter DLL, American Family Filter content filter , http://www.afafilter.com |
| Ctxlsp.dll | V | Citrix related - http://www.citrix.com |
| Ctxnsp.dll | V | Citrix related - http://www.citrix.com |
| Cvdakvgogoczl.dll | M | Trojan.Win32.Agent.afg |
| Cwalsp.dll | V | Related to Content Watch content filter - http://www.contentwatch.com/ |
| Cwhook.dll | V | ContentWatch Internet Filter - http://www.contentwatch.com |
| Cwlsp.dll | V | ContentWatch content filter/parental controls - http://www.contentwatch.com |
| Dcsws2.dll | V | DiamondCS Port Explorer , http://www.diamondcs.com.au/portexplorer/index.php?page=compat |
| Disksearchservicestub.dll | V | Baidu Disk Search Service (Chinese) - http://disk.baidu.com |
| Dnserv.dll | M | Trojan-PSW.Win32.Agent.aks - http://www.threatexpert.com/files/dnserv.dll.html |
| Dolsp.dll | M | DealsOnline |
| Drwebsp.dll | V | Dr. Web Antivirus - http://www.sald.com |
| Drwhook.dll | V | Dr. Web Antivirus , http://www.sald.com |
| Ebspi.dll | M | W32.Ogleon.A - http://www.symantec.com/en/uk/smb/security_response/writeup.jsp?docid=2007-062608-4815-99&tabid=2 |
| Eguard.dll | U | Possibly part of SMC Etherguard Personal Firewall - http://smc.com/index.cfm?event=viewProduct&localeCode=EN_USA&cid=9&scid=&pid=251 |
| Eklsp.dll | V | EyeKidz Internet Content Filter (French) - http://www.eyekidz.com/ |
| Espfspi.dll | D | EnigmaFireWall, made by the same company that makes SpyHunter, a spyware removal program that uses questionable/misleading business practices , http://www.enigmasoftware.com/products.shtml |
| Espi11.dll | U | Unknown, seems to appear mostly in logs in Chinese |
| Espsock2.dll | V | Esafe Antivirus , http://www.esafe.com |
| Etls.dll | D | E-Trends Software, company that pays people in exchange for allowing them to monitor their browsing and online purchasing habits through use of their software. Likely knowingly installed, but still might want to verify. - http://www.e-trends.net/Home.aspx |
| Exterminatorsysfire.dll | D | Spy-Ad Exterminator Pro, Anti-spyware program prone to false-positives which encourage user to purchase, recommend removal - http://oreware.com/viewprogram.php?prog=16 |
| Farlsp.dll | V | Farstone HackerSmacker Firewall , http://www.farstone.com/home/en/shtml/fw_overview.shtml |
| Fbm.dll | V | ZeroAds / ZeroSpyware , http://www.fbmsoftware.com |
| Fbm_lsp.dll | V | ZeroAds Popup Blocker , http://www.fbmsoftware.com |
| Fgprov.dll | M | Trojan.Glaze.A - http://research.sunbelt-software.com/threatdisplay.aspx?name=Trojan.Glaze.A&threatid=168762 |
| Filterlsp.dll | V | Spyware Doctor - http://www.pctools.com/spyware-doctor/ |
| Flsmngr.dll | M | CWS/SearchAnyway Search Hijacker |
| Fltmgr.dll | M | Nonstopsearch.com Hijacker / AdWare.Searcher.b |
| Fortilsp.dll | V | Forticlient Host Security - http://www.fortinet.com/products/forticlient.html |
| Fslsp.dll | V | F-Secure Antivirus/Internet Security - http://www.f-secure.com |
| Ftl.dll | U | ? |
| Fwcwsp.dll | V | Microsoft ISA Server 2004 Firewall Client - http://support.microsoft.com/?scid=kb;en-us;841139 |
| Fwtunnellsp.dll | V | First Virtual Communications Click to Meet communications software , http://www.fvc.com |
| G.dll | U | ? |
| Gamelink.dll | U | Part of an app. called Easy2Game, an "overseas online gaming" proxy service |
| Gapsp.dll | V | Juniper/Neoteris Secure Application Manager , http://www.juniper.net/netscreen_com.html |
| Gdiplus32.dll | M | Troj/QQPass-AIX - http://www.sophos.com/security/analyses/trojqqpassaix.html |
| Gfilter.dll | V | GG E-Sports Games related - http://www.gg-game.com/ |
| Googledesktopnetwork1.dll | V | Google Desktop Search - http://desktop.google.com |
| Gsp.dll | D | Guardian Monitor 9.0 keylogger/ parental surveillance program. Verify whether knowingly installed by the user and/or a parent/guardian/etc , http://www.guardiansoftware.com/en/monitor.html |
| Hbmter.dll | M | Hengbang / Adware.hbang (Chinese) - http://research.sunbelt-software.com/threatdisplay.aspx?name=Henbang&threatid=44429 |
| Hclsock5.dll | V | Hummingbird Enterprise/Connectivity Software , http://www.hummingbird.com |
| hfirewall.dll | V | HandyCafe Cyber Cafe Management Software Firewall - http://www.handycafe.com/en/ |
| Hlcap.dll | U | Unknown, possibly related to an HTTP Packet Sniffer called HTTPLook - http://fileforum.betanews.com/detail/HTTPLook/1037654064/1 |
| Hooklib.dll | V | Parental Filter internet content filter - http://www.ecommsec.com/product_info.php?cPath=23&products_id=98 |
| Hpt.dll | U | Seems to be related to an online game called Heat Project (Chinese) - http://en.wikipedia.org/wiki/Heat_Project . Unclear whether this file is part of the game or some type of "cheat" program |
| Hsvwer2.dll | M | Infostealer.Phax - http://www.symantec.com/security_response/writeup.jsp?docid=2007-040515-0222-99&tabid=2 |
| Hsvwer9.dll | M | Troj/Maran-AJ - http://www.sophos.com/virusinfo/analyses/trojmaranaj.html |
| Humshmx.dll | V | Hummingbird Enterprise/Connectivity Software - http://www.hummingbird.com |
| Hvsound2.dll | M | Trojan.Maran.jh |
| Iapplsp.dll | V | IA Performance Pro Firewall / Netlink Personal Pro Firewall - http://www.iarevolution.com/bsstrick/Default.aspx?Page=Products |
| Iapp_lsp.dll | V | IA Performance Pro Firewall / Netlink Personal Pro Firewall - http://www.iarevolution.com/bsstrick/Default.aspx?Page=Products |
| Iavlsp.dll | V | System Mechanic 7 Professional's Antivirus - http://www.iolo.com/sm/7/ |
| Icelsp_8.0.675.0.dll | V | IBM Proventia Desktop / BlackIce - http://www.iss.net/products/Proventia_Desktop/index.html |
| Icelsp_8.0.xxx.x.dll | V | (xxx=version number) BlackIce PC Protection - http://www.blackice.com/PCProtection-Firewall.htm |
| Icf.dll | V | Safeeyes Internet Content Filter - http://safeeeyes.com/ |
| Ickgw32i.dll | V | KidsWatch Parental Control Software - http://www.kidswatch.com/ |
| Iclsp.dll | U | Likely Malware, mostly seen in Spanish and/or German logs |
| Ictload.dll | V | Accelenet Internet Accelerator , http://www.ictcompress.com/products_accelenet.html |
| Idmmbc.dll | V | Internet Download Manager , http://www.internetdownloadmanager.com/index.html |
| Iflsp.dll | V | Digital Arts IFP4 Content Filtering (Japanese) - http://www.daj.co.jp/index.htm |
| Ifw_xfilter.dll | V | System Mechanic Professional 7's Firewall - http://www.iolo.com/sm/7/ |
| Iga.dll | V | Polesoft Lockspam Pro spam blocking software - http://www.polesoft.com/ |
| Ikeeper.dll | U | Unknown, mostly in Chinese logs |
| Imconnmgr.dll | U | Y!TunnelPro Connection Manager? , http://www.ytunnelpro.com |
| Imn.dll | M | Trojan.Win32.Agent.afg |
| Imon.dll | V | NOD32 Antivirus , http://www.nod32.com/home/home.htm |
| Imslsp.dll | V | ZoneLabs IM Secure , http://www.zonelabs.com/store/content/catalog/products/sku_list_imsp.jsp?lid=imlink |
| Inetadpt.dll | M | NewtonKnows/Virtumundo/Targetsoft , http://www.kephyr.com/spywarescanner/library/targetsoft.inetadpt/index.phtml |
| Inetcntrl.dll | V | Bsafe Online Internet Content Filter , http://www.bsafehome.com/moreinfo.asp?product=264 |
| Inetcntrl0002.dll | V | Bsafe Online Internet Content Filter , http://www.bsafehome.com/moreinfo.asp?product=264 |
| Inetcntrl0007.dll | V | Bsafe Online Internet Content Filter , http://www.bsafehome.com/moreinfo.asp?product=264 |
| Inetcntrl0010.dll | V | Bsafe Online Internet Content Filter - http://www.bsafehome.com/moreinfo.asp?product=264 |
| Integard.dll | V | Integard parental control software - http://www.raceriver.com/ |
| Ippsp.dll | V | PC InternetPatrol , http://www.pcinternetpatrol.com/index.php |
| Ipsp.dll | V | IProtectYou Web Filter , http://www.softforyou.com/ip-index.html |
| Is3lsp.dll | V | Part of Stopzilla anti-spyware - http://www.is3.com/STOPzillaHomeUser.do |
| Iss_clsp.dll | V | Intel AnyPoint Home Networking - http://www.intel.com/anypoint/ |
| Iss_slsp.dll | V | Intel Anypoint Home Networking , http://www.intel.com/anypoint
|
| Ivlsp.dll | U | Unknown, possibly InternetVelocity speedup software - http://www.internetvelocity.com/ ? |
| K7wslsp.dll | V | K7 Total Security related - http://www.k7computing.com/products.asp (mostly Japanese logs) |
| Kslsp.dll | V | T-Online Kinderschutz-Software Child Protection Software (German) |
| Kvsock.dll | V | Jiangmin KV2006 Antivirus software or related (Chinese) - http://global.jiangmin.com/index.htm |
| Kvsock_2.dll | V | Jiangmin KV2006 Antivirus software or related (Chinese) - http://global.jiangmin.com/index.htm |
| Kvsock_3.dll | V | Jiangmin KV2006 Antivirus software or related (Chinese) - http://global.jiangmin.com/index.htm |
| Kvwsp.dll | V | Jiangmin KVW3000 Antivirus software or related (Chinese) - http://global.jiangmin.com/index.htm |
| Kvwspxp.dll | V | Kingsoft Antivirus (Chinese) , http://english.duba.net/duba_intr.htm |
| Laf1.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Laf2.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Laf3.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Laf4.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Laf5.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Laf6.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Laf7.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Laf8.dll | M | Installed by rogue anti-spyware program AntiVirGear |
| Ld6media.dll | M | Infostealer.Gamania / Mal/Maran-A |
| Ldvwer6.dll | M | Troj/Maran Variant |
| Lfe.dll | U | RedCannon Security related? , http://www.redcannon.com |
| Lslsimon.dll | V | VirusBuster II Antivirus , http://www.leprechaun.com.au/vbsupport/faq.asp?q=95 |
| Lslsp.dll | V | Integrity Online Shield Content Filter - http://www.integrity.com/ (Also possibly used by other content filter/parental control apps.) |
| Lsp.dll | M | ShopAtHomeSelect (Uninstall "ShopatHomeSelect Agent" from Add/Remove) , http://www.kephyr.com/spywarescanner/library/shopathomeselect/index.phtml |
| Lsp32.dll | V | Iontas PCEye2000 Parental Control/Monitoring Software - http://www.pceye2000.com/about.htm |
| Lspak.dll | M | Virtumundo |
| Lspcs.dll | V | Cybersitter - http://www.cybersitter.com Note: Because Cybersitter allows for user submissions to their site block list, there have been reports of valid sites being blocked, including some security sites. If the user is reporting that type of problem, this may be the cause. |
| Lsprdir.dll | U | ? |
| Mailscan.dll | M | Part of WinAntivirus, an antivirus product with very suspicous marketing practices. Their site/product are designed to look very similar to Symantec's Norton Antivirus, and tricked several people into thinking they were buying a new version os Norton. In addition, they've registered the domain symantic.com in an obvious attempt to further the misconception that this is Symantec's Norton Antivirus. There are also unconfirmed reports of this (either through unwanted install or through regular internet ad popups) popping up false warnings that a user's Norton Antivirus subscription has expired and trying to get you to buy their product, presumably under the assumption that this is a new version of Norton , http://www.winantivirus.com |
| Mclsp.dll | V | McAfee Antivirus , http://www.mcafee.com |
| Md6media.dll | M | Infostealer.Phax - http://www.symantec.com/security_response/writeup.jsp?docid=2007-040515-0222-99&tabid=2 |
| Md8media.dll | U | Very likely malware related to Infostealer.Phax - http://www.symantec.com/security_response/writeup.jsp?docid=2007-040515-0222-99&tabid=2 |
| md8vwer.dll | U | Very likely malware related to Infostealer.Phax - http://www.symantec.com/security_response/writeup.jsp?docid=2007-040515-0222-99&tabid=2 |
| Mdnsnsp.dll | V | Part of Apple's Bonjour and/or Rendezvous zero configuration networking, most often added by Itunes version 5.0 and later - http://lists.apple.com/mailman/listinfo/bonjour-dev |
| Mkls.dll | M | MarketScore / Relevant Knowledge |
| Mprsock.dll | U | ? |
| Msafd.dll | V | Microsoft Windows Sockets 2.0 Service Provider - http://www.liutilities.com/products/wintaskspro/dlllibrary/msafd/ |
| Msafdlsp.dll | V | DyKnow Vision classroom learning software - http://www.dyknow.com/vision/ |
| Msapi.dll | U | Unknown, but appears likely to be malware, possibly called Win32.Troj.Agent.32768 or Win32.PSWTroj.OnlineGames.54533 (chinese) |
| Mshlpxb64.dll | M | TSPY_MARAN.B - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EB&VSect=Td |
| Mslsp.dll | M | Search results hijacker |
| Msnetax.dll | M | Trojan.Win32.Agent.afg |
| Msniffer.dll | V | CoCSoft Stream Down streaming media download tool - http://stream-down.cocsoft.com/ |
| Mssbupx.dll | M | TSPY_MARAN.AE - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EAE&VSect=Td |
| Msspi.dll | M | CoolwebSearch (CWS) Variant , http://www.spywareinfo.com/~merijn/cwschronicles.html#msspi |
| Msvrl.dll | M | Friend Msvrl hijacker (French) , http://www.pestpatrol.com/pestinfo/f/friend_msvrl.asp |
| Mswsck2.dll | M | TROJ_CIMUZ.M - http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_CIMUZ.M |
| Mswsck32.dll | M | Trojan-Proxy.Win32.Cimuz.ck / Trojan.IPtables |
| Mswsock.dll | V | Microsoft Windows Sockets 2.0 Service Provider - http://www.liutilities.com/products/wintaskspro/dlllibrary/mswsock/ |
| Mswsock2.dll | M | Win32: Small-EKE |
| Mswsock30.dll | M | TSPY_LEGMIR.ABS - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FLEGMIR%2EABS&VSect=Td |
| Mswsosp.dll | V | Microsoft Windows Sockets provider - http://www.greatis.com/appdata/n/m/mswsosp.dll.htm |
| Msx2.dll | U | Seems to be installed by something called INTERNETSECURITYSYSTEM, possibly from here , http://softappco.com |
| Msxcbuc.dll | M | TSPY_DELF.MJ - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FDELF%2EMJ&VSect=Td |
| Mwnsp.dll | V | MicroWorld EScan/Mailscan - http://www.mwti.net/antivirus/escan/escan.asp |
| Mwtsp.dll | V | MicroWorld EScan/Mailscan , http://www.mwti.net/antivirus/escan/escan.asp |
| Mxavlsp.dll | V | OnTrack Data Recovery , http://www.ontrack.com |
| Napinsp.dll | V | Windows Vista E-mail Naming Shim Provider |
| Nblsp.dll | V | iNetBeagle Content Filter , http://www.inetbeagle.com/index2.htm |
| Nb_spi.dll | U | Possibly part of something called Netspot? |
| Nclsp.dll | D | Net Control 2 Remote Administration Tool (likely valid, but verify that it's been knowingly installed or that the system is in a workplace or other network setting where this would likely be found) - http://www.netcontrol2.com/nc2.html |
| Ndpwsspr.dll | V | InDefense MailDefense , http://www.indefense.com/products/mdstd.html |
| Netd.dll | V | NetDog Porn Filter - http://www.netdogsoft.com/ |
| Netdog.dll | D | Armor2net personal firewall , http://www.armor2net.com (possibly contains or is related to an anti-spyware product known as ArmorWall, which is considered a rogue anti-spyware app. here - http://www.spywarewarrior.com/rogue_anti-spyware.htm ) |
| Netfilter.dll | U | Unknown, but appears likely to be malware, possibly Win32.Locksky.BB |
| Netsonic.dll | M | Netsonic Web3000 |
| New.Net | M | NewDotNet - Uninstall NewDotNet from Add/Remove or use uninstaller here , http://www.newdotnet.com/#remove
|
| Newdotnet6_98.dll | M | NewDotNet |
| Nihlsp.dll | V | NetIntelligence Home Parental Controls/Security Software - http://parentalcontrol.netintelligence.com/ |
| Nlaapi.dll | V | Windows Vista Network Location Awareness 2 component |
| Nlf.dll | V | Norman Parental Control - http://www.norman.com/ |
| Nl_lsp.dll | V | Netlimiter , http://www.netlimiter.com |
| Nmnsp.dll | D | Covenant Eyes "internet accountability" software. Surveillance software that tracks all activities, logs keystrokes, etc. Verify whether knowingly installed by the user, http://www.covenanteyes.com/about.php |
| Nmtracer.dll (1)* | M | Netmeter/Netratings (See second entry below. Also included as part of a similar program called Opistat. Opistat offers its users a free download of Norman Antivirus for joining. It appears Opistat must stay installed to be able to update Norman) |
| Nmtracer.dll (2)* | D | (See previous entry) Added as part of a research program called Opistat, which offers users a free download of Norman Antivirus for joining. Opistat also makes Netmeter/Netratings, which is either the same or a similar program and is considered spyware/adware. It appears Opistat must stay installed to be able to update Norman. |
| Nnsp.dll | V | Net Nanny Ad-Free Ad Filter , http://www.netnanny.com |
| Normanpf.dll | V | Norman Personal Firewall , http://www.norman.com/Product/Home_Home_office/Firewall/en |
| Nsp.dll | M | ADW_CNSMIN.G - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=ADW%5FCNSMIN%2EG&VSect=Td |
| Nutafun4.dll | V | MKS Toolkit for Enterprise Developers (f/k/a Nutcracker) , http://www.mkssoftware.com/products/tk/ds_tkedev.asp |
| Nvappfilter.dll | V | NVidia Nforce Network Access Manager - http://www.nvidia.com/object/security.html |
| Nwprovau.dll | V | Microsoft Client Services for Netware |
| Nwws2nds.dll | V | Novell Netware , http://support.novell.com/servlet/tidfinder/2954141 |
| Nwws2sap.dll | V | Novell Netware , http://support.novell.com/servlet/tidfinder/2954141 |
| Nwws2slp.dll | V | Novell Netware , http://support.novell.com/servlet/tidfinder/2954141 |
| Od2media.dll | M | Trojan-PSW.Win32.Maran.di or variant |
| Od5media.dll | M | TSPY_MARAN.KZ - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EKZ&VSect=Td |
| Od6media.dll | M | TSPY_MARAN.HS - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EHS&VSect=Td |
| Od7media.dll | M | Win32/PSW.Maran |
| Odmedia9.dll | M | TSPY_MARAN.WH - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY_MARAN.WH&VSect=Td |
| Odsp.dll | V | Aventail Corporation VPN - http://www.aventail.com |
| Odvwer4.dll | M | TSPY_MARAN.AU - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EAU&VSect=Td |
| Oj3sound.dll | M | Troj/Maran-K - http://www.sophos.com/virusinfo/analyses/trojmarank.html |
| Ojviewer.dll | M | TSPY_MARAN.D - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2ED&VSect=Td |
| Oksound.dll | M | Troj/Maran-AF - http://www.sophos.com/security/analyses/trojmaranaf.html |
| Opls.dll | M | Opinion Square |
| Osmim.dll | M | Marketscore Internet Accelerator , http://www.pestpatrol.com/PestInfo/M/MarketScore.asp |
| Ossysprv.dll | U | Possibly related to Net-Nanny Chat Monitor - http://www.netnanny.com/products/chat_monitor/features.html |
| Ou2sound.dll | M | Troj/Maran-I - http://www.sophos.com/virusinfo/analyses/trojmarani.html |
| Ou3viewer.dll | M | PWS.Maran variant |
| Ou6sound.dll | M | Backdoor.Win32.Agent.ahn |
| Ou6viewer.dll | M | Troj/Maran-Z - http://www.sophos.com/security/analyses/trojmaranz.html |
| Ou7viewer.dll | M | TSPY_WOW.ABV - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FWOW%2EABV&VSect=Td |
| Ou9sound.dll | M | PWS-Maran.dr - http://vil.nai.com/vil/content/v_141243.htm |
| Ouviewer.dll | M | PWS-Maran.dr - http://vil.nai.com/vil/content/v_141243.htm |
| Pavlsp.dll | V | Panda Titanium Antivirus 2004 , http://www.pandasoftware.com/products/titanium2004 |
| Pclsp.dll | V | Microsoft MSN Parental Controls |
| Pctlsp.dll | V | PC Tools Antivirus or related - http://www.pctools.com |
| Pfftsp.dll | V | Boomerang Software Extendia Security Suite , http://www.boomerangsoftware.com/Products/Security/eSecurity.htm |
| Pgplsp.dll | V | PGP Universal Encryption related - http://www.pgp.com/products/universal/ |
| Phagemon.dll | U | Seems to be part of something called Passwordguard (Chinese) |
| Pidlsp.dll | V | Coolspot Personal ID (German) , http://www.personalid.de/?template=agb |
| Pl15w2sp.dll | V | InfraStruXure Manager client - http://sturgeon.apcc.com/techref.nsf/docID/34FDA775F81438DD852570F2004B2A61/$FILE/npn-00316-EN.doc |
| Pnrpnsp.dll | V | Windows XP Advanced Networking Pack file , http://support.microsoft.com/?kbid=817778 |
| Prifw.dll | V | Primedius Firewall or related , http://www.primedius.com/PersonalFirewall.htm |
| Prls.dll | M | AdWare.Win32.RK.e (possibly Marketscore related) |
| Proxy.dll | V | Spamfighter , http://www.spamfighter.com |
| Proxyfilter.dll | V | Hide My IP 2007 - http://www.hide-my-ip.com/ |
| Proxyie.dll | V | Sinfor SSL Client Component (Chinese) |
| Prplsf.dll | V | Propel Dial-Up Accelerator (installed by various ISP's software for "high-speed" dial-up service) , http://www.propel.com |
| Prxerdrv.dll | V | Proxifier - http://www.proxifier.com/ |
| Prxernsp.dll | V | Proxifier - http://www.proxifier.com/ |
| Pxlsp.dll | V | Proxyconn connection accelerator , http://www.proxyconn.com
|
| Qgo.dll | U | ? |
| Quartz32.dll | M | Adware.Roogoo |
| Rlls.dll | M | Relevant Knowledge |
| Rnlsp.dll | U | ? |
| Rnr20.dll | V | Microsoft Windows Sockets 2.0 TCP/IP name service provider - http://www.liutilities.com/products/wintaskspro/dlllibrary/rnr20/ |
| Rnrzhb.dll | U | Likely realted to I-dns.net client - http://www.i-dns.net/technology/technology.html |
| Rpc32vm.dll | M | Spyware/Adware added by an Emule "Mod" (German?) , http://translate.google.com/translate?hl=en&sl=de&u=http://hilfe.schnellie.de/ptopic,8220.html |
| Rsvp322.dll | M | Troj/SpamToo-AR - http://www.sophos.com/virusinfo/analyses/trojspamtooar.html |
| Rsvp32_2.dll | M | TROJ_BZUB.CT - http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BZUB.CT |
| Rsvpsp.dll | V | Microsoft Windows Rsvp Service Provider - http://www.processlibrary.com/directory/files/rsvpsp/ |
| S5spi.dll | V | Permeo E-Border network security software - http://www.permeo.com/pressreleases/pressreleases_030402.htm |
| Samnsp.dll | V | Juniper/Neoteris Secure Application Manager - http://www.neoteris.com |
| Sarah.dll | V | Fritz! DSL Firewall/Router - http://www.avm.de/en/index.php3?Produkte/FRITZCard_DSL/FRITZ_Box/index.js.html |
| Scopinet.dll | V | SmartCOP Antivirus - http://www.s-cop.com |
| Securenet.dll | V | Part of Hide My IP 2007, an anonymous surfing program - http://www.hide-my-ip.com/hidemyip.shtml |
| Sfbnsp.dll | M | Oemji Search Plus |
| Skysocks.dll | V | SkyDSL Satellite DSL provided by various ISPs - http://www.strato.de/skydsl/index_himmlisches.html |
| Sliplsp.dll | V | SlipStream Internet Accelerator Server , http://www.slipstreamdata.com/sp.html |
| Smnsp.dll | V | All-in-One Secretmaker security software - http://www.secretmaker.com |
| Sniffer.dll | M | Logger.Agent.pa |
| Snootern.dll | M | TROJ_RILER.B - http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_RILER.B&VSect=T |
| Softpc.dll | U | AOL related, possibly for parental controls? , http://www.spywareinfo.com/forums/index.php?showtopic=35733 |
| Soundmid1.dll | M | Spyware/Maran.5B87!pws - http://www.anchiva.com/virus/view.asp?vname=Spyware/Maran.5B87!pws&vsect=t |
| Soundmid3.dll | M | TSPY_MARAN.JW - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EJW&VSect=Td |
| Soundmid4.dll | M | Trojan-PSW.Win32.Maran.fa |
| Spacklsp.dll | V | T-Online DSL Manager (German) - http://service.t-online.de/c/50/99/05/5099054.html |
| Spamexpertslsp.dll | V | SpamExperts email anti-spam filter - http://www.spamexperts.com/products-services/spam-experts-home.html |
| Spampallsp.dll | V | Spampal Transparent Proxy email filter - http://www.spampalforums.org/phpBB2/viewtopic.php?t=6389 |
| Spi.dll | V | Ashampoo Firewall - http://www.ashampoo.com |
| Spidll.dll | V | Anti Trojan Elite (f/k/a Trojan Ender) (Chinese) , http://www.remove-trojan.com |
| Spiservice.dll | M | TSPY_AGENT.NYE - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY_AGENT.NYE&VSect=Td |
| Spishare.dll | V | Artisoft I.Share corporate internet sharing application , http://support.artisoft.com/docs/16.htm |
| Spjvshim.dll | U | Unknown, suspected malware |
| Spspprv1.dll | V | Spamihilator anti-spam filter - http://www.spamihilator.com/ |
| Spsublsp.dll | V | Spam Subtract , http://www.intermute.com/spamsubtract |
| Spyemergencycnt.dll | V | Spy Emergency Anti-Spyware Software - http://www.netgate.sk/index.php?option=com_content&task=view&id=18&Itemid=41 |
| Sqmapi32.dll | M | PSW.OnlineGames.MAD |
| Sselsp.dll | V | Steganos Internet Anonoym anonymizer , http://www.steganos.com/?product=SIA6&language=en |
| Stplayer.dll | V | SafeTP Transparent FTP Security Software , http://safetp.cs.berkeley.edu |
| Sunvlsp.dll | U | Unknown, seems to be by a company called Jiaodaimingtai Limited (Chinese) |
| Syspy.dll | V | Sygate Sybergen Secure Desktop , http://www.sygate.com/news/ssd2b.htm |
| Syswvnt.dll | D | Winvestigator keylogger/surveillance program. Depends on if it was knowingly installed by the user and/or a parent/guardian/etc , http://www.tropsoft.com/winvestigator |
| Tasi.dll | V | GoldTach Pro Firewall (Chinese) , http://www.goldtach.com |
| Tasp.dll | V | GoldTach Pro Firewall (Chinese) , http://www.goldtach.com |
| Tcomplsp.dll | V | Traffic Compressor - http://www.tcompressor.com/ |
| Tcpipdog0.dll | D | Relates to Dr.Com Internet Login Client Network Management Software apparently used by school campuses - http://www.doctorcom.com/ (Chinese). It's also identified as malware by some scanners, Kaspersky does or did at one time identify it as Trojan-Spy.Win32.MLWatch.a |
| Tcpipdogr0.dll | D | Relates to Dr.Com Internet Login Client Network Management Software apparently used by school campuses - http://www.doctorcom.com/ (Chinese). It's also identified as malware by some scanners, Kaspersky does or did at one time identify it as Trojan-Spy.Win32.MLWatch.a |
| Tcpspylsp.dll | V | TCP Spy , http://www.westbrooksoftware.com/tsdetails.shtml |
| Tj6viewer.dll | M | Troj/Maran-AB - http://www.sophos.com/virusinfo/analyses/trojmaranab.html |
| Tj9viewer.dll | M | Troj/Maran-AW - http://www.sophos.com/security/analyses/trojmaranaw.html |
| Tmlsp.dll | V | Trend Micro AntiVirus 2007 - http://www.trendmicro.com/ftp/documentation/readme/TAV15.1_32_readme.txt |
| Tmwsock.dll | M | Troj/Cimuz-CD - http://www.sophos.com/security/analyses/trojcimuzcd.html |
| Ua_lsp.dll | V | XFire Messenger - http://www.xfire.com/xf/modules.php?name=Forums&file=viewtopic&t=1999&start=45 and also likely "Ultimate Arena" online games - https://www.ultimatearena.com/games/homenewuser.jsp |
| Ufilter.dll | V | Vcom SystemSuite 7 Professional - http://shop.avanquest.com/usa/prod.php?pid=2224&tr1=AQ_US_WS_SS7_homepage |
| Vblsp.dll | V | VirusBuster / Vexira antivirus - http://www.virus-buster.com/en/ |
| Vetredir.dll | V | VET Antivirus , http://www.vet.com.au |
| Vgmail.dll | V | Vantage Software Virus Guard - http://www.vantagesoftware.com/products/virus_guard/ |
| Vigsockc.dll | U | Viguard Antivirus (French)? , http://www.viguard.com/en/intro_en.php |
| Vlsp.dll | V | V-One Smartpass (Wireless Networking Card Related) , http://www.v-one.com/techsupport/tn008.htm |
| Vmaildog.dll | U | Possibly Kingsoft Antivirus (Chinese) , http://english.duba.net/duba_intr.htm |
| Vmain.dll | M | NewtonKnows , http://www.pestpatrol.com/PestInfo/n/newtonknows.asp |
| Vnsp.dll | V | V-One Smartpass (Wireless Networking Card Related) , http://www.v-one.com/techsupport/tn008.htm |
| Vwlsp.dll | U | Probably related to Venturi Wireless Broadband Client software - http://www.venturiwireless.com/ |
| W2pxdrv.dll | U | Proxy Labs ProxyCap? , http://proxylabs.netwu.com/index.html |
| Webhdll.dll | M | WebHancer , http://www.kephyr.com/spywarescanner/library/webhancer/index.phtml |
| Wglsp.dll | V | WinGate Proxy Server , http://www.wingate.com/product-wingate.php |
| Whllsp.dll | V | Whale Communications VPN related - http://www.whalecommunications.com/ |
| Whlnsp.dll | V | Whale Communications VPN related - http://www.whalecommunications.com/ |
| Winaklsp.dll | M | Virtumundo |
| Winhealer.dll | M | Backdoor.Win32.Agent.alp - http://research.sunbelt-software.com/threatdisplay.aspx?name=Backdoor.Win32.Agent.alp&threatid=128016 |
| Winhttps.dll | U | Likely malware, possibly Trojan.LegMir |
| Winlspak.dll | M | Virtumundo |
| Winrnr.dll | V | Microsoft LDAP RnR Provider dll - http://www.liutilities.com/products/wintaskspro/dlllibrary/winrnr/ |
| Wins4f.dll | V | S4F Internet Content Filtering , http://www.s4f.com |
| Winsflt.dll | V | PureSight Internet Content Filter - http://www.puresight.com/bin/en.jsp?enPage=PSPage&enZone=Solutions |
| Winsock2.dll | M | TR/DllWinsock.A / Trojan.Win32.Small.sv |
| WinSysAM.dll | V | Home & Family Content Filter - http://s.planetgood.net/Users/TechSupportFAQ.htm#_Toc9925457 |
| Wintcp.dll | U | Unknown (mostly Chinese logs) |
| Wmpcd32.dll | M | Adware.Roogoo |
| Wpclsp.dll | V | Windows Vista - Windows Parental Control Related |
| Wps.dll | V | Sygate Firewall , http://smb.sygate.com |
| Wrnetdrv.dll | V | Exploit Prevention Labs' SocketShield or LinkScanner - http://www.explabs.com/ss/index.html |
| Ws2dummy.dll | U | ? , http://computercops.biz/postitle61026-0-0-.html |
| Ws2_64.dll | M | Trojan.Redfall , http://securityresponse.symantec.com/avcenter/venc/data/trojan.redfall.html |
| Wsck32.dll | V | BrowseControl Internet Usage Restriction Software - http://www.browsecontrol.com/ |
| Wsd_sock32.dll | M | Malware (Chinese) - Trojan-PSW.Win32.Agent.if |
| Wshbth.dll | V | Windows Bluetooth related , http://www.bluetooth.com/tech/works/glossary.asp |
| Wshcon32.dll | M | Rogoo Hijacker (Chinese) |
| Wsock3.dll | M | TrojanSpy:Win32/Glaze.B, a/k/a Trojan-Spy.Win32.Banker |
| Wsockdog.dll | U | ? |
| Wsocket.dll | U | Likely Malware (Chinese?) - http://www.computercops.biz/p162597-Task_Manager_Problem.html |
| Wspirda.dll | V | Windows ME Wireless Infrared , http://support.microsoft.com/support/kb/ARTICLES/Q262/5/60.asp |
| Wspredir.dll | M | Notroubles.biz Search Hijacker |
| Wspwsp.dll | V | Microsoft ISA Server Firewall - http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q303757& |
| Wsp_fix.dll | U | Unknown, but very likely malware (Chinese) |
| Xfilter.dll | V | 8e6/XStop Internet Content Filter Proxy , http://www.8e6.com/index.htm |
| xfire_lsp.dll | V | XFire Messenger , http://www.xfire.com/xf/modules.php?name=Forums&file=viewtopic&t=1999&start=45 |
| Xfire_lsp_xxxx.dll | V | (xxxx=4 digit number) XFire Messenger , http://www.xfire.com/xf/modules.php?name=Forums&file=viewtopic&t=1999&start=45
|
| Xnetgdn.dll | U | Possibly Filesclab Internet Guardian Angel content filter? , http://www.aptrio.com/Internet/Tools-Utilities/xnetgdn-138284.html |
| Xnetlsp.dll | V | Nortel Networks XtraNet SSL VPN Client - http://www.nortelnetworks.com/index.html |
| Yourreminder.dll | M | YourReminder Adware - http://www.spywareresources.com/threatdisplay.aspx?name=YourReminder&threatid=47668 |
| Ypclsp.dll | V | Yahoo Parental Controls , http://ypc.yahoo.com/prod_info.html |
| Z.dll | U | ? |
| Zklspr.dll | V | Zero Knowledge Freedom Internet Security & Privacy , http://www.freedom.net/index-nf.php |
| _Easywall.dll | V | EasyCafe Internet Café Software , http://www.tinasoft.com/easycafe |
| _Handywall.dll | V | HandyCafe Cyber Cafe Management Software - http://www.handycafe.com/en/ |
| _hfirewall.dll | V | HandyCafe Cyber Cafe Management Software Firewall - http://www.handycafe.com/en/ |