| Type | Name | Status | Path/File | Description |
| Winlogon Notify | eventss | X | atmpvc.dll | Troj/Festod-A |
| Winlogon Notify | ewsmsg | X | %SYSDIR%\ewsmsg.dll | Haxdoor |
| Winlogon Notify | explorer | X | explorer.dll | Troj/SCLog-B |
| Winlogon Notify | Extensions, H323TSP, Hints, Installer, Internet Settings, IPConfTSP, Media Center, MediaContentIndex, ModuleUsage | X | random named dll in the System32 folder | Variant of Adware.Look2Me |
| Winlogon Notify | extfpu | X | extfpu.dll | Goldun variant |
| Winlogon Notify | extxerox | X | extxerox.dll | Goldun variant |
| Winlogon Notify | f3dsl | X | MSplg7.dll | Troj/Goldun-R |
| Winlogon Notify | F8adsl | X | %SYSDIR%\MSplg7.dll | Goldun variant |
| Winlogon Notify | fanxctrl | X | fanxctrl.dll | Goldun variant |
| Winlogon Notify | feclipna | X | %SYSDIR%\feclipna.dll | W32/Stration-G |
| Winlogon Notify | flashdma | X | %SYSDIR%\flashdma.dll | Goldun |
| Winlogon Notify | flashdrvr | X | flashdrvr.dll | Troj/Haxdoor-BX |
| Winlogon Notify | FLWLEvents | L | FiberlinkNetProv.dll | FIBERLINK |
| Winlogon Notify | Fly | X | %SYSDIR%\smart.dll | Hupigon variant (Password stealer) |
| Winlogon Notify | FolderGuard | L | FGuard32.dll | FolderGuard |
| Winlogon Notify | fsp_abwl | L | %SYSDIR%\fsp_abwl.dll | Access_Boss |
| Winlogon Notify | g, gg, gggg, gggggg, gs | X | adsldpbd.dll | Trojan-Downloader.Win32.Delf variant - CoolWebSearch |
| Winlogon Notify | gatexkey | X | gatexkey.dll | Haxdoor variant |
| Winlogon Notify | gatwxkey | X | gatwxkey.dll | Goldun variant |
| Winlogon Notify | GbPluginAbn | L | %PROGRAMFILES%\GbPlugin\gbiehabn.dll | G-Buster_Browser_Defense |
| Winlogon Notify | GbPluginBb | L | %PROGRAMFILES%\GbPlugin\gbieh.dll | G-Buster_Browser_Defense |
| Winlogon Notify | gdiwxp | X | gdiwxp.dll | Goldun variant |
| Winlogon Notify | gdowxp | X | gdowxp.dll | Goldun variant |
| Winlogon Notify | gdwxp3 | X | gdwxp3.dll | Goldun variant |
| Winlogon Notify | GoToAssist | L | G2AWinLogon. dll | Citrix GoToAssist |
| Winlogon Notify | GoToMyPC | L | G2WinLogon.dll | GoToMyPC |
| Winlogon Notify | Guardian | X | msg***.dll (*=a number) | http://sarc.com/avcenter/venc/data/adware.look2me.html |
| Winlogon Notify | GuardianCXYHN | X | %SYSDIR%\6po4svc.dll | Zestyfind |
| Winlogon Notify | h618, h619 | X | %SYSDIR%\g*******.dll (*******= random numbers usually 6-10) | Win32Delf Trojan variant |
| Winlogon Notify | hobbatool | X | hobbatool.dll | SC-KeyLog variant |
| Winlogon Notify | hpprintx | X | hpprintx.dll | Troj/Haxdoor-AU |
| Winlogon Notify | htproc | X | htproc32.dll | Trojan.Psw.Lineage variant |
| Winlogon Notify | ibudu | X | %SYSDIR%\ibudu.dll | Goldun variant |
| Winlogon Notify | icmuwmau | X | %Sysdir%\icmuwmau.dll | W32/Stratio-E |
| Winlogon Notify | ideusr50 | X | ideusr50.dll | Goldun variant |
| Winlogon Notify | ies4dll | X | ies4dll.dll | Goldun variant |
| Winlogon Notify | iesdl4l | X | iesdl4l.dll | Troj/Haxdoor-AQ |
| Winlogon Notify | iexplore | X | ******.dll (* + random character) | Troj/Dloader-EW |
| Winlogon Notify | iexplorer | X | %SYSDIR%\iexplorer.dll | Troj/SCLog-AI |
| Winlogon Notify | IfxWlxEN | L | IfxWlxEN.dll | Infineon TPM Software |
| Winlogon Notify | igfxcui | L | igfxsrvc.dll | Intel(R) integrated graphics controller |
| Winlogon Notify | igfxcui | O | igfxdev.dll | Intel(R) integrated graphics controller |
| Winlogon Notify | igfxcul | L | igfxsrvc.dll | Intel(R) integrated graphics controller |
| Winlogon Notify | instcat | X | %SYSDIR%\instcat.dll | not yet identified malware
|
| Winlogon Notify | IntelWireless | L | LgNotify.dll | Associated with the Intel PRO/Set Wireless software |
| Winlogon Notify | IntlRun | X | random named dll in the System32 folder | Variant of Adware.Look2Me |
| Winlogon Notify | isodvrtg | X | %SYSDIR%\isodvrtg.dll | Goldun variant |
| Winlogon Notify | jgsdrpcn | X | jgsdrpcn.dll | W32.Stration.DE@ mm |
| Winlogon Notify | ke32paag | X | %SYSDIR%\ke32paag.dll | Goldun |
| Winlogon Notify | klogon | L | klogon.dll | Kaspersky AVP6 |