SystemLookup - O20 List

List Information

Started by: FBJ, CastleCops Team

Maintained by: Metallica

O20 List

The O20 list catalogues AppInit_DLLs and Winlogon Notify autoruns.

Although some legit programs use them, these entries are often used by trojans or hijackers.

Status Key:
X = Malware, spyware, adware, or other potentially unwanted items
L = Legitimate items
O = Open to debate
? = Currently unknown status

Filename

Name

Searching: Over 1,184 items

Search Results
(displaying 14 results)

Name	Filename	Description	Status
Antiwpa	%SYSDIR%\antiwpa.dll	Illegal Windows crack	X `Winlogon Notify`
st3	C:\WINDOWS\system32\st3.dll	TrojanDownloader.Delf.NBH	X `Winlogon Notify`
sunotify	WINDOWS\SYSTEM32\sunotify.dll	ShadowUser_Pro - Create a virtual copy of your system for private and safe Web surfing.	L `Winlogon Notify`
(no name)	Windows\System32\vsmvhk.dll folder in (XP)	ShadowUser_Pro - Create a virtual copy of your system for private and safe Web surfing.	L `AppInit_DLLs`
PixVue	WinLogon.DLL	PixVue	L `Winlogon Notify`
welcome	[random].dll ins System32 directory	Spyware.Look2Me	X `Winlogon Notify`
winnt32	%SYSDIR%\SYSTEM32\WinNt32.dll	W32/Mutant.XE!tr.dldr	X `Winlogon Notify`
App Management, App Paths, Applets, BITS, Control Panel, Controls Folder, CSCSettings, DateTime, Dynamic Directory, Explorer	random named dll in the System32 folder	Variant of Adware.Look2Me	X `Winlogon Notify`
Extensions, H323TSP, Hints, Installer, Internet Settings, IPConfTSP, Media Center, MediaContentIndex, ModuleUsage	random named dll in the System32 folder	Variant of Adware.Look2Me	X `Winlogon Notify`
IntlRun	random named dll in the System32 folder	Variant of Adware.Look2Me	X `Winlogon Notify`
MS-DOS Emulation, Nls, OemStartMenuData, OfficeUpdate, OptimalLayout, policies, Reinstall, Reliability	random named dll in the System32 folder	Variant of Adware.Look2Me	X `Winlogon Notify`
Run, RunOnce, RunOnceEx, RunServices-, Setup, Shell Extensions, ShellCompatibility, ShellScrap	random named dll in the System32 folder	Variant of Adware.Look2Me	X `Winlogon Notify`
ShellServiceObjectDelayLoad , SideBySide, StillImage, Syncmgr, Telephony, ThemeManager, Themes, Unimodem	random named dll in the System32 folder	Variant of Adware.Look2Me	X `Winlogon Notify`
Uninstall, URL, WebCheck, WindowsUpdate, SharedDLLs, MCD, FS Templates	random named dll in the System32 folder	Variant of Adware.Look2Me	X `Winlogon Notify`