CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O20 AppInit_DLLs and Winlogon Notify

Currently 528 entries and growing...
Last updated on 2008-08-17 20:00:11 Eastern.


FBJ originally ran this list but closed it permanently. FBJ graciously permitted CastleCops to continue maintaining the list as of Jul 8, 2005. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z



    TypeNameStatusPath/FileDescription
    Winlogon NotifyksapghX%SYSDIR%\ksapgh.dllGoldun variant
    Winlogon NotifylanmuiXlanmui.dll Backdoor.Win32.Haxdoor.hb
    Winlogon NotifyLavasoftStartupCleanerOvx2cleaner.dlxLeftover of Lavasoft VX2Cleaner
    Winlogon NotifyLBTServLlbtserv.dll Logitech_Bluetooth
    Winlogon NotifyLBTWlgnL%common files%\logitech\bluetooth\LBTWlgn.dll Logitech_Bluetooth
    Winlogon Notifyldr64Xldr64.dll Mitglieder.HT
    Winlogon Notifylgn1216aXlgn1216a.dll Haxdoor
    Winlogon NotifylinkerregXDocuments and Settings\All Users\Documents\Settings\linker.dllXorpix variant
    Winlogon Notifylinksrv0X%SYSDIR%\linksrv0.dllGoldun variant
    Winlogon NotifyLMIinitLLMIinit.dllLogMeIn Remote Control Helper
    Winlogon NotifyLogCryptX%SYSDIR%\LogCrypt.dll TROJ_DIEHARD_variant
    Winlogon NotifyloginkeyLloginkey.dllMicrosoft Tablet PC Platform component
    Winlogon Notifylogon032Xlogon032.dll Goldun_variant
    Winlogon Notifylogon16xXlogon16x.dllSpy.Goldun variant
    Winlogon NotifylogonsXredist.dll Troj/Dloadr-UY
    Winlogon Notifyloky2regX%All Users Dokument%\Settings\loky2.dllTrojan-Spy.Win32.Banker variant
    Winlogon NotifyLoveX%SYSDIR%\LoveFly.dllHupigon variant (Password stealer)
    Winlogon Notifylsd_f3Xlsd_f3.dll Troj/Banker-EX
    Winlogon NotifylstreamX%SYSDIR%\lstream.dll Haxdoor
    Winlogon NotifymcfCC4XmcfCC4.dll W32.Starimp
    Winlogon NotifymcfG7AXmcfG7A.dll Troj/Haxdoor-AK
    Winlogon NotifyMCPClientLmcpstub.dllStardock WindowBlinds
    Winlogon NotifymcrwaveX%SYSDIR%\mcrwave.dllTrojan-Spy.Win32.Goldun variant
    Winlogon Notifymd4hshX%SYSDIR%\md4hsh.dllGoldun variant
    Winlogon NotifymdfproXmdfpro.dllGoldun variant
    Winlogon NotifyMetaFrameLctxnotif.dllCitrix Metaframe
    Winlogon Notifymi5035a0X%SYSDIR%\mi5035a0.dll Goldun.Fam
    Winlogon Notifymloader32Xmloader32.dll Mitglieder.HT
    Winlogon NotifymmcdllXmmcdll.dllGoldun variant
    Winlogon Notifymms400Xmms400.dll Troj/Conhook-AF
    Winlogon Notifymmx17gXmmx17g.dllHaxdoor variant
    Winlogon Notifymmx432Xmmx432.sysAdded by the Goldun.J TROJAN! Read the link, rootkit type stealth involved.
    Winlogon NotifymmxeroxkXmmxeroxk.dllGoldun variant
    Winlogon NotifymonlnL%SYSDIR%\monln.dll Comodo
    Winlogon Notifymp3res.dllX%SYSDIR%\mp3res.dll Haxdoor
    Winlogon Notifymplink.dllX%SYSDIR%\mplink.dll Haxdoor
    Winlogon NotifyMS-DOS Emulation, Nls, OemStartMenuData, OfficeUpdate,
    OptimalLayout, policies, Reinstall, Reliability
    Xrandom named dll in the System32 folderVariant of Adware.Look2Me
    Winlogon Notifymsctl32.dllXmsctl32.dllSpamTool.Win32.Mailbot
    Winlogon Notifymsdtc32X%SYSDIR%\msdtc32.dllTrojan-Downloader.Win32.Small.hoa
    Winlogon NotifymsjtwinrXmsjtwinr.dllWarezov/Stration variant
    Winlogon NotifyMsMsSrvXMsMsSrv.DLL Trojan.WinlogonHook.Delf.A
    Winlogon NotifymsupdateXmsupdate32.dll TR/Proxy.Delf.AL
    Winlogon Notifymsv1_1X%SYSDIR%\msv1_1.dll W32/RecyInf-A
    Winlogon Notifymszsrn32Xmszsrn32.dll Banwarum/W32/Zasran-D
    Winlogon NotifyNavLogonLNavLogon.dllNorton AntiVirus
    Winlogon NotifynclabydllXnclabydll.dllGoldun variant
    Winlogon NotifyNetIdentity NotificationLXtNotify.dllNovell NetIdentity
    Winlogon NotifynkunpackXnkunpack.dllGoldun variant
    AppInit_DLLsnslookup.dllX%SYSDIR%\nslookup.dll ClickSpring.PuritySCAN
    Winlogon NotifyNTvsxXNTvsx.dllPassword stealing trojan

    Engine Version 2.0 by CastleCops

    spacer spacer