| Type | Name | Status | Path/File | Description |
| Winlogon Notify | A3dxq | X | a3dxq.dll | Purityscan/Zhelatin variant |
| Winlogon Notify | A3dxq | X | %SYSDIR%\a3dx8.dll | Troj/Xorpix-Z |
| Winlogon Notify | ackpbsc , acautsrv | L | %SYSDIR%\ackpbsc.dll | Actividentity |
| Winlogon Notify | ACNotify | L | ACNotify.dll | Access_Connections |
| Winlogon Notify | ActiveSync | L | WcesWlgn.dll | ActiveSync |
| Winlogon Notify | acunlock | L | %ProgramFiles%\ActivIdentity\ActivClient\acunlock.dll | Actividentity |
| Winlogon Notify | aeskap | X | %SYSDIR%\aeskap.dll | Haxdoor variant |
| Winlogon Notify | agpbrdg0 | X | agpbrdg0.dll | Troj/Banker-DMN |
| Winlogon Notify | alcomt | X | %SYSDIR\alcomt.dll | Goldun_variant
|
| Winlogon Notify | alcopt | X | %SYSDIR%\alcopt.dll | Haxdoor_variant |
| Winlogon Notify | Antiwpa | X | %SYSDIR%\antiwpa.dll | Illegal Windows crack |
| Winlogon Notify | App Management, App Paths, Applets, BITS, Control Panel, Controls Folder, CSCSettings, DateTime, Dynamic Directory, Explorer | X | random named dll in the System32 folder | Variant of Adware.Look2Me |
| Winlogon Notify | arm32reg | X | Documents\Settings\arm32.dll | Troj/Xorpix-F |
| Winlogon Notify | arprmdg0 | X | arprmdg0.dll | Troj/Haxdoor-DI |
| Winlogon Notify | artm_newreg | X | Documents and Settings\All Users\Documents\Settings\artm_new.dll | Trojan-Proxy.Win32.Xorpix |
| Winlogon Notify | asusrx20 | X | asusrx20.dll | Troj/Haxdoor-CZ |
| Winlogon Notify | ataswl | L | ataswl.dll | Webex |
| Winlogon Notify | ati2kaag | X | %SYSDIR%\ati2kaag.dll | Goldun variant |
| Winlogon Notify | ati2krtg | X | %SYSDIR%\ati2krtg.dll | Goldun variant |
| Winlogon Notify | ati2paag | X | %SYSDIR%\ati2paag.dll | Goldun variant |
| Winlogon Notify | atiddaxx | X | atiddaxx.dll | Goldun variant |
| Winlogon Notify | atietaxx | X | atietaxx.dll | Goldun variant |
| Winlogon Notify | atixdaxx | X | atixdaxx.dll | Goldun variant |
| Winlogon Notify | atixdbxx | X | atixdbxx.dll | Goldun variant |
| Winlogon Notify | atmgrtok | L | atmgrtok.dll | IBM |
| Winlogon Notify | audmgr | X | %SYSDIR%\audmgr32.dll | W32/Stratio-BW |
| Winlogon Notify | avgwlntf | L | avgwlntf.dll | AVG |
| Winlogon Notify | avldr | L | avldr.dll | Panda Titanium 2006 Antivirus |
| Winlogon Notify | avload32 | X | avload32.dll | Haxdoor.gj |
| Winlogon Notify | avpe32 | X | avpe32.dll | Haxdoor |
| Winlogon Notify | avpu32 | X | avpu32.dll | Troj/Haxdoor-ED |
| Winlogon Notify | avpx32 | X | avpx32.dll | Haxdoor |
| Winlogon Notify | AwayNotify | L | %Program Files%\Lenovo\AwayTask\AwayNotify.dll | Lenovo/IBMTools |
| Winlogon Notify | awtqq | X | awtqq.dll | Spyware.Virtumonde variant |
| Winlogon Notify | axdebugl | X | axdebugl.dll | TR/PSW.PdP.CT.1.E.3 |