SystemLookup - SEH List

List Information

Started by: SystemLookup

Maintained by: Metallica, TonyKlein

SEH List

The SEH list catalogues legitimate and potentially unwanted ShellExecuteHooks.

Status Key:
X = Malware, spyware, adware, or other potentially unwanted items
L = Legitimate items
O = Open to debate
? = Currently unknown status

Filename

CLSID

Name

Searching: Over 1,871 items

Search Results
(displaying 6 results)

CLSID	Name	Filename	Description	Status
{E60A0B68-AF3A-C1D2-CD09-5A81A136D2BA}	(no name)	%WINDIR%\SYSTEM32\sonj32drv.dll	Infostealer trojan, dropper detected by Kaspersky antivirus as Trojan-GameThief.Win32.OnLineGames.aiky - also see here	X
{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}	Microsoft AntiMalware ShellExecuteHook	Windows Defender\MpShHook.dll	Windows Defender	L
{AEB6717E-7E19-11d0-97EE-00C04FD91974}	(no name)	%SYSDIR%\windows.dll, winforms.dll	TSPY_ONLINEG.IOT trojan	X
{ACC52793-08DC-42BB-99AB-F70FD2A7E244}	??- SEApproved	%PROGRAMFILES%\Windows???\WinCipShe ll.dll	Infostealer trojan, see here	X
{56F9679E-7826-4C84-81F3-532071A8BCC5}	Windows Desktop Search Namespace Manager	%ProgramFiles%\Windows Desktop Search\MSNLNamespaceMgr.dll	Windows Desktop Search	L
{6710C780-E20E-4C49-A87D-321850ED3D7C}	(no name)	%APPDATA%\Microsoft\Windows\Cookies \[random chars].dll	GsearchFinder family of browser hijackers, for example Trotux and Youndoo	X