| Type | Name | Status | Path/File | Description |
| Winlogon Notify | rmk8ot | X | rmk8ot.dll | Haxdoor variant |
| Winlogon Notify | rpcc | X | rpcc.dll | Backdoor.Win32.Bifrose.aat |
| Winlogon Notify | rpcc1 | X | rpcc1.dll | not yet identified Trojan/Backdoor |
| Winlogon Notify | rpccd | X | %SYSDIR%\rpccd.dll | Trojan.Downloader-RPCC.Process |
| Winlogon Notify | rsdapi | X | rsdapi.dll | TSPY_GOLDUN.AT |
| Winlogon Notify | Run, RunOnce, RunOnceEx, RunServices-, Setup, Shell Extensions, ShellCompatibility, ShellScrap | X | random named dll in the System32 folder | Variant of Adware.Look2Me |
| Winlogon Notify | rxx5ot | X | rxx5ot.dll | Haxdoor variant |
| Winlogon Notify | SABWinLogon | L | SABWINLO.DLL | SuperAdBlocker |
| Winlogon Notify | SASWinLogon | L | SASWINLO.dll | SUPERantispyware |
| Winlogon Notify | satad640 | X | satad640.dll | Goldun_variant |
| Winlogon Notify | satau320 | X | satau320.dll | Goldun variant |
| Winlogon Notify | satdll | X | satdll.dll | Troj/Haxdoor-AS |
| Winlogon Notify | satmmc | X | %SYSDIR%\satmmc.dll | Troj/Haxdoor-BT |
| Winlogon Notify | scsi2usb | X | %SYSDIR%\scsi2usb.dll | Goldun.Fam |
| Winlogon Notify | scsiusr4 | X | %SYSDIR%\scsiusr4.dll | Troj/Haxdoor-DD |
| Winlogon Notify | sdcard98 | X | sdcard98.dll | Trojan-Spy.Win32.Goldun |
| Winlogon Notify | SDNotify | L | SDNotify.dll | Spyware Detector; note |
| Winlogon Notify | SDNotify | L | SDNotify.dll | Spyware_Doctor |
| Winlogon Notify | se500mdm | X | se500mdm.dll | Goldun variant |
| Winlogon Notify | se633mxx | X | se633mxx.dll | Goldun variant |
| Winlogon Notify | Sebring | L | LgNotify.dll | AlienWare Desktop Skins |
| Winlogon Notify | semd32 | X | semd32.dll | Haxdoor |
| Winlogon Notify | SensSrv | X | senssrv.dll | Downloader.Agent.afl |
| Winlogon Notify | seppgs | X | seppgs.dll | Troj/Haxdoor-CY |
| Winlogon Notify | sertgs | X | sertgs.dll | Haxdoor |
| Winlogon Notify | sha1hsh | X | %SYSDIR%\sha1hsh.dll | Goldun variant |
| Winlogon Notify | ShellServiceObjectDelayLoad, SideBySide, StillImage, Syncmgr, Telephony, ThemeManager, Themes, Unimodem | X | random named dll in the System32 folder | Variant of Adware.Look2Me |
| Winlogon Notify | sksdll | X | sksdll.dll | Troj/Haxdoor-AN |
| Winlogon Notify | skyu16 | X | skyu16.dll | Haxdoor variant |
| Winlogon Notify | skyx16 | X | skyx16.dll | Haxdoor variant |
| Winlogon Notify | smcss | X | smcss.dll | Troj/SCLog-AJ |
| AppInit_DLLs | spoolsv.dll | X | %sysdir%\spoolsv.dll | ClickSpring.PuritySCAN |
| Winlogon Notify | spoolsvc | X | spoolsvc.dll | Troj/Dropper-AT |
| Winlogon Notify | sre | X | sre.dll | Trojan.Downloader.Agent.Fc |
| Winlogon Notify | ssldr | X | ssldr32.dll | Troj/Agent-ZD |
| Winlogon Notify | ssqroon | X | %SYSDIR%\ssqroon.dll | Trojan.Awax |
| Winlogon Notify | st3 | X | C:\WINDOWS\system32\st3.dll | TrojanDownloader.Delf.NBH |
| Winlogon Notify | st3i | X | q****.dll (**** random numbers) | variant of Troj/Delf |
| Winlogon Notify | STOPzilla | L | IS3WLHandler.dll | StopZilla |
| Winlogon Notify | style2 | X | q****_disk.dll (**** random numbers) | CoolWebSearch parasite variant |
| Winlogon Notify | style32 | X | winstyle3.dll, winstyle32.dll | Trojan.Downloader.Delf.H |
| Winlogon Notify | sunotify | L | WINDOWS\SYSTEM32\sunotify.dll | ShadowUser_Pro
- Create a virtual copy of your system for private and safe Web surfing. |
| AppInit_DLLs | svchost.dll | X | %SYSDIR%\svchost.dll | PurityScan |
| Winlogon Notify | svkvpn | X | svkvpn.dll | Haxdoor variant |
| Winlogon Notify | SymcEventMonitors | L | EventMonitors.dll | Symantec |
| Winlogon Notify | sysprint | X | sysprint.dll | Troj/Haxdoor-DC |
| Winlogon Notify | szr_dll | X | szr_dll.dll | Win-Trojan/Backdoor.15433 |
| Winlogon Notify | s_reg | X | notifysb.dll | Spyware Soft Stop |
| Winlogon Notify | T3Notify | L | T3Notify.dll | T3 Security Suite |
| Winlogon Notify | TabBtnWL | L | TabBtnWL.dll | Tablet PC Platform application |