CastleCops® - O20 AppInit_DLLs and Winlogon Notify

Need help? Click here to register for free! Absolutely zero advertisements on this site!

O20 AppInit_DLLs and Winlogon Notify

Currently 528 entries and growing...
Last updated on 2008-08-17 20:00:11 Eastern.

FBJ originally ran this list but closed it permanently. FBJ graciously permitted CastleCops to continue maintaining the list as of Jul 8, 2005. The full HTML list is here.

KEY:

"L" = Legitimate

"O" = Open to Debate

"X" = Malware/Bad

"?" - Unknown

ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

Type	Name	Status	Path/File	Description
Winlogon Notify	davctool	X	davctool.dll	Stration/Warezov
Winlogon Notify	ddirectz	X	ddirectz.dll	Troj/Haxdoor-BS
Winlogon Notify	debugg	X	debugg.dll	Troj/Haxdoor-AC
Winlogon Notify	DeviceNP	L	%SYSDIR%\DeviceNP.dll	Hewlett-Packard
Winlogon Notify	DfLogon	L	LogonDll.dll	DeepFreeze
Winlogon Notify	dimsntfy	L	dimsntfy.dll	System file in Windows 2003 SP1
Winlogon Notify	directpt	X	directpt.dll	Troj/Haxdoor-AX
Winlogon Notify	directut	X	directut.dll	Goldun variant
Winlogon Notify	divxps	X	%SYSDIR%\divxps.dll	Haxdoor variant
Winlogon Notify	divxrs	X	%SYSDIR%\divxrs.dll	Haxdoor
Winlogon Notify	docent0	X	docent0.dll	Logger.Goldun variant (malware)
Winlogon Notify	docent2	X	docent2.dll	Trojan.PWS.GoldSpy variant
Winlogon Notify	dpl1npwm	X	dpl1npwm.dll	Warezov/Stration-NZ
Winlogon Notify	DPWLN	L	DPWLEvHd.dll	DigitalPersona fingerprint reader
Winlogon Notify	drct16	X	drct16.dll	Haxdoor
Winlogon Notify	drtw3a	X	drtw3a.dll	Haxdoor
Winlogon Notify	dvb03a and other **3a (** = random)	X	****3a.dll	Haxdoor
Winlogon Notify	dvd4free	X	dvd4free.dll	Trojan/Spy.Goldun.de.1
Winlogon Notify	dxmamcia	X	%SYSDIR%\dxmamcia.dll	Stration/Warezov variant

Engine Version 2.0 by CastleCops


	2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 126ppm 0.053s (0.002s) Making cybercriminals unhappy since 2002*