WinLogon Event Notifications – WLNOTIFY.DLL

Wlnotify.dll is a library that contains application programming interface (API) functions to receive and handle notifications events generated by Winlogon (winlogon.exe) These event messages includes lock, unlock, logoff, logon, startup, shutdown, startscreensaver, stopscreensaver, and startshell. It is specific to the current user's session. This is a system file that you'll want to leave in place if you're using Windows 95/98/Me/NT/2000/2003. You'll find more information at http://technet.microsoft.com/en-us/library/cc721961(WS.10).aspx.

While wlnotify.dll is a perfectly legit file, the WinLogon Notification process can be abused by malicious programs. Third party programs (usually dlls) can tap into this process and use it to run files when your system starts up. It is even possible to start a Win32 application before the user logon.

Safe

Microsoft