Detected by Malwarebytes as Spyware.Password. Note - this is not a legitimate entry for CyberLink PowerStarter and the file is located in %UserTemp%

Detected by McAfee as RDN/Generic.bfr!ic and by Malwarebytes as CryptTool.Agent.CL

Detected by Malwarebytes as Trojan.Agent. The file is located in %UserTemp%

CoolWebSearch parasite variant - where * represents a random character. The file is located in %System%

Detected by McAfee as RDN/Generic.dx and by Malwarebytes as Backdoor.Agent.DCE

Detected by McAfee as RDN/Generic Dropper and by Malwarebytes as Backdoor.Agent.CCGen

Detected by Sophos as W32/Rbot-LJ - where * represents a random letter

Unidentified adware - where * represents a random character. The file is located in %UserTemp%

Detected by McAfee as W32/Generic.worm!p2p

Detected by McAfee as Generic BackDoor!fpz and by Malwarebytes as Trojan.Agent

Detected by Dr.Web as Trojan.DownLoader4.12696 and by Malwarebytes as Trojan.Downloader.E

Detected by McAfee as PWS-Banker and by Malwarebytes as Spyware.Banker

Detected by Sophos as Mal/Slenfbot-E and by Malwarebytes as Trojan.Agent. The file is located in %AppData%\ziopjjhddxkff

Detected by McAfee as RDN/Generic Dropper and by Malwarebytes as Backdoor.Agent.FL

Detected by Malwarebytes as Trojan.Dropper. The file is located in %AppData%\update

CoolWebSearch parasite variant. The file is located in %Windir%

Detected by Trend Micro as WORM_AGOBOT.MX and by Malwarebytes as Backdoor.Bot

Detected by Sophos as W32/Autorun-AUB and by Malwarebytes as Trojan.Agent

Detected by Malwarebytes as Spyware.Pony. Note - this is not a legitimate entry for CyberLink PowerStarter and the file is located in %UserTemp%