Detected by Sophos as Troj/Mutbo-A

Detected by Sophos as W32/Darby-O

Detected by Sophos as Troj/Badgent-A

Detected by Malwarebytes as Trojan.Agent.LG

Detected by Malwarebytes as Trojan.Injector.E

Detected by Symantec as Trojan.Didytak.B and by Malwarebytes as Trojan.Agent.ATSGen

Detected by Dr.Web as Trojan.DownLoader11.24200 and by Malwarebytes as Trojan.Downloader.ADBGen

Detected by Malwarebytes as Trojan.Agent

Detected by Dr.Web as Trojan.Inject1.23086 and by Malwarebytes as Trojan.Downloader.E - see examples here and here

Detected by Sophos as Troj/Proxy-FP

Detected by Symantec as Backdoor.Heplane. Filenames seen have included msvc.exe, kaspersky.exe, nrton.exe, wins.exe, gah32.exe, 1.tmp, syste.exe, alg.exe, socks.exe, winxpsp2.exe, tek9.exe, sks.exe, hihi.exe, s.exe, xps2.exe, dns2.exe, ikav32.exe and more

Detected by Symantec as Adware.PurityScan - also see the archived version of Andrew Clover's page

Detected by Sophos as Troj/Agent-EBL

Adpopup adware, The most common filenames are epswad3.exe, epswad4.exe and dcf5678.exe - all found in %Windir%

Detected by Malwarebytes as Backdoor.Agent. The file is located in %System%

Unidentified adware

Detected by Sophos as W32/Rbot-AFV

TCent adware. Both files are located in %ProgramFiles%\TENCENT\Adplus

Detected by Trend Micro as WORM_SDBOT.VT