Detected by McAfee as PolyPatch-UPX and by Malwarebytes as Trojan.Agent.ASD

Detected by Symantec as Backdoor.Autoupder

Detected by Symantec as W32.Ruland.A@mm

Detected by Malwarebytes as Trojan.Agent. The file is located in %System%

AntivirusBEST rogue security software - not recommended, removal instructions here. Detected by Malwarebytes as Rogue.AntivirusBEST

Detected by Malwarebytes as Trojan.Graftor. The file is located in %ProgramFiles%\1c2Z2U5T6q

Detected by Microsoft as Worm:Win32/Slenfbot.HJ

Detected by Symantec as W32.Ruland.A@mm

Detected by Kaspersky as Trojan.Win32.AF.20. The file is located in %System%

Detected by Trend Micro as TROJ_ULPM.FX

Detected by Dr.Web as Trojan.Inject1.35030 and by Malwarebytes as Trojan.Agent.HSGen

Detected by Malwarebytes as Trojan.Banker. The file is located in %ProgramFiles%\1c2Z2U5T6q

Detected by Malwarebytes as Trojan.Agent. The file is located in %AppData%

Detected by Malwarebytes as Trojan.Agent. The file is located in %UserTemp%

Detected by McAfee as Generic.dx. Note - this is not the legitimate Adobe update manager with the same filename which is normally located in %CommonFiles%\Adobe\ARM\1.0. This one is located in %AppData%

Detected by Malwarebytes as Trojan.MSIL. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts

Detected by McAfee as RDN/Generic.dx and by Malwarebytes as Backdoor.Agent.E

Detected by Malwarebytes as Trojan.FakeAlert.SA - where # represents a digit. The file is located in %CommonAppData%\[6 characters] - see examples here and here

SafeSearch adware