Detected by Dr.Web as Trojan.Proxy2.887 and by Malwarebytes as Trojan.Agent

Detected by Dr.Web as Trojan.DownLoader7.25886 and by Malwarebytes as Backdoor.Agent.Gen

BargainBuddy adware

Detected by McAfee as Generic.bfg and by Malwarebytes as Adware.KorAd

Detected by Dr.Web as Trojan.DownLoader7.25886 and by Malwarebytes as Backdoor.Agent.Gen. Note - the file is located in %AllUsersStartup% and %UserStartup% and its presence there ensures it runs when Windows starts

Detected by Sophos as W32/Delbot-AG

Detected by Kaspersky as Trojan.NSIS.Miner.a. The file is located in %AppData%\bcm

BeSys adware

Detected by Trend Micro as WORM_LOCKSKY.T

Detected by Malwarebytes as Spyware.Agent.E. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts

Added by a variant of the Storm/Nuwar/Zhelatin worm. The file is located in %Windir%

Detected by Malwarebytes as Trojan.Agent.EDAI. Note - this is not the legitimate Broadcom Network Adapters configuration utility entry which shares the same startup name and filename and is typically located in %System%. This one is located in %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins

Bullseye adware

Detected by Symantec as W32.HLLW.Backzat

Detected by Sophos as W32/Sdbot-ADK

Detected by Sophos as Troj/Dorf-AZ

Detected by McAfee as RDN/Generic BackDoor!ri and by Malwarebytes as Backdoor.Agent.DCE

Detected by McAfee as RDN/Pinkslipbot.as!c and by Malwarebytes as Trojan.Agent. Note - the file is located in %AllUsersStartup% and/or %UserStartup% and its presence there ensures it runs when Windows starts

Detected by Malwarebytes as Hacktool.AVDeleter. The file is located in %AppData%\BayduSecuryt