CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

Layered Service Providers (LSPs)

Currently 365 entries and growing...

Reprinted with permission from Zupe who owns the list. This list is mirrored here for easy online access and research. Each Name is hyperlinked to its own informational page. For expert assistance, please post here.

KEY:
  • "V" - Valid LSPs
  • "M" - Malware LSPs
  • "D" - Debatable LSPs
  • "U" - Unknown LSPs

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

    File NameStateDescription
    Mailscan.dllMPart of WinAntivirus, an antivirus product with very suspicous marketing practices. Their site/product are designed to look very similar to Symantec's Norton Antivirus, and tricked several people into thinking they were buying a new version os Norton. In addition, they've registered the domain symantic.com in an obvious attempt to further the misconception that this is Symantec's Norton Antivirus. There are also unconfirmed reports of this (either through unwanted install or through regular internet ad popups) popping up false warnings that a user's Norton Antivirus subscription has expired and trying to get you to buy their product, presumably under the assumption that this is a new version of Norton , http://www.winantivirus.com
    Mclsp.dllVMcAfee Antivirus , http://www.mcafee.com
    Md6media.dllMInfostealer.Phax - http://www.symantec.com/security_response/writeup.jsp?docid=2007-040515-0222-99&tabid=2
    Md8media.dllUVery likely malware related to Infostealer.Phax - http://www.symantec.com/security_response/writeup.jsp?docid=2007-040515-0222-99&tabid=2
    md8vwer.dllUVery likely malware related to Infostealer.Phax - http://www.symantec.com/security_response/writeup.jsp?docid=2007-040515-0222-99&tabid=2
    Mdnsnsp.dllVPart of Apple's Bonjour and/or Rendezvous zero configuration networking, most often added by Itunes version 5.0 and later - http://lists.apple.com/mailman/listinfo/bonjour-dev
    Mkls.dllMMarketScore / Relevant Knowledge
    Mmchost.dllMTrojan.Win32.Agent.yhk
    Mprsock.dllU?
    Msafd.dllVMicrosoft Windows Sockets 2.0 Service Provider - http://www.liutilities.com/products/wintaskspro/dlllibrary/msafd/
    Msafdlsp.dllVDyKnow Vision classroom learning software - http://www.dyknow.com/vision/
    Msapi.dllUUnknown, but appears likely to be malware, possibly called Win32.Troj.Agent.32768 or Win32.PSWTroj.OnlineGames.54533 (chinese)
    Msass.dllUUnknown but likely malware, possibly a Trojan-PSW.Win32.OnLineGames variant
    Msavp.dllMTrojan-PSW.Win32.OnLineGames.dsg
    Mscomm.dllMWin32.Troj.OnlineGames
    Mshlpxb64.dllMTSPY_MARAN.B - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EB&VSect=Td
    Mslsp.dllMSearch results hijacker
    Msnetax.dllMTrojan.Win32.Agent.afg
    Msniffer.dllVCoCSoft Stream Down streaming media download tool - http://stream-down.cocsoft.com/
    Mssbupx.dllMTSPY_MARAN.AE - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FMARAN%2EAE&VSect=Td
    Msspi.dllMCoolwebSearch (CWS) Variant , http://www.spywareinfo.com/~merijn/cwschronicles.html#msspi
    Msvrl.dllMFriend Msvrl hijacker (French) , http://www.pestpatrol.com/pestinfo/f/friend_msvrl.asp
    Mswsck2.dllMTROJ_CIMUZ.M - http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_CIMUZ.M
    Mswsck32.dllMTrojan-Proxy.Win32.Cimuz.ck / Trojan.IPtables
    Mswsock.dllVMicrosoft Windows Sockets 2.0 Service Provider - http://www.liutilities.com/products/wintaskspro/dlllibrary/mswsock/
    Mswsock2.dllMWin32: Small-EKE
    Mswsock30.dllMTSPY_LEGMIR.ABS - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FLEGMIR%2EABS&VSect=Td
    Mswsosp.dllVMicrosoft Windows Sockets provider - http://www.greatis.com/appdata/n/m/mswsosp.dll.htm
    Msx2.dllUSeems to be installed by something called INTERNETSECURITYSYSTEM, possibly from here , http://softappco.com
    Msxcbuc.dllMTSPY_DELF.MJ - http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=TSPY%5FDELF%2EMJ&VSect=Td
    Mwnsp.dllVMicroWorld EScan/Mailscan - http://www.mwti.net/antivirus/escan/escan.asp
    Mwtsp.dllVMicroWorld EScan/Mailscan , http://www.mwti.net/antivirus/escan/escan.asp
    Mxavlsp.dllVOnTrack Data Recovery , http://www.ontrack.com

    spacer spacer