Detected by Symantec as W32.Ackantta.H@mm

Detected by Sophos as Troj/Banker-QF

Detected by Malwarebytes as Trojan.Downloader - see an example here

Detected by Trend Micro as TROJ_ERTFOR.AL and by Malwarebytes as Trojan.Downloader - see examples here and here

Detected by Malwarebytes as Trojan.Downloader - see examples here and here

Detected by Malwarebytes as Trojan.Downloader - see examples here and here

Detected by Sophos as W32/Stration-FW

Added by a variant of the VIVIA.A TROJAN!

Detected by Malwarebytes as Trojan.Agent. The file is located in %Temp% - see examples here and here

Detected by Malwarebytes as Trojan.Autoit. Note - this entry loads from the HKCU\Policies\Explorer\Run key and is not a valid Heaventools file. It is typically located in %AppData% or a sub-folder

Detected by Malwarebytes as Trojan.Neurevt. The file is located in %CommonAppData%\Hunt Systems Manager

Detected by Malwarebytes as Trojan.Agent. The file is located in %CommonFiles%\highworker.{2227A280-3AEA-1069-A2DE-08002B30309D} - see an example here

Detected by Malwarebytes as Backdoor.HMCPol.Gen. The file is located in %System%\install