List Information

Started by: FBJ, CastleCops Team

Maintained by: Metallica
O20 List

The O20 list catalogues AppInit_DLLs and Winlogon Notify autoruns.

Although some legit programs use them, these entries are often used by trojans or hijackers.

Status Key:
X = Malware, spyware, adware, or other potentially unwanted items
L = Legitimate items
O = Open to debate
? = Currently unknown status
Search Results
(displaying 14 results)

Name Filename Description Status
klogonklogon.dllKaspersky AVP6L Winlogon Notify
st3C:\WINDOWS\system32\st3.dllTrojanDownloader.Delf.NBHX Winlogon Notify
sunotifyWINDOWS\SYSTEM32\sunotify.dllShadowUser_Pro - Create a virtual copy of your system for private and safe Web surfing.L Winlogon Notify
(no name)Windows\System32\vsmvhk.dll folder in (XP)ShadowUser_Pro - Create a virtual copy of your system for private and safe Web surfing.L AppInit_DLLs
PixVueWinLogon.DLLPixVueL Winlogon Notify
welcome[random].dll ins System32 directorySpyware.Look2MeX Winlogon Notify
winnt32%SYSDIR%\SYSTEM32\WinNt32.dllW32/Mutant.XE!tr.dldrX Winlogon Notify
MS-DOS Emulation, Nls, OemStartMenuData, OfficeUpdate, OptimalLayout, policies, Reinstall, Reliabilityrandom named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify
ShellServiceObjectDelayLoad
, SideBySide, StillImage, Syncmgr, Telephony, ThemeManager, Themes, Unimodem
random named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify
IntlRunrandom named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify
Extensions, H323TSP, Hints, Installer, Internet Settings, IPConfTSP, Media Center, MediaContentIndex, ModuleUsagerandom named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify
Uninstall, URL, WebCheck, WindowsUpdate, SharedDLLs, MCD, FS Templatesrandom named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify
App Management, App Paths, Applets, BITS, Control Panel, Controls Folder, CSCSettings, DateTime, Dynamic Directory, Explorerrandom named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify
Run, RunOnce, RunOnceEx, RunServices-, Setup, Shell Extensions, ShellCompatibility, ShellScraprandom named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify


Powered by SystemLookup Engine. © 2008-2018 BrightFort. All Rights Reserved. | Privacy Policy | Terms of Use