Detected by Malwarebytes as Trojan.Agent.Gen. Note - this is not the legitimate Windows calculator file of the same name which is located in %System%. This one is located in %AppData%\system32

Detected by Trend Micro as TROJ_MONDER.RON

Detected by Malwarebytes as Backdoor.Agent.E. Note - this is not the legitimate Google Chrome browser which is normally located in %ProgramFiles%\Google\Chrome\Application. This one is located in %System%\InstallDir

Detected by Malwarebytes as Backdoor.Agent.E. Note - this is not the legitimate Google Chrome browser which is normally located in %ProgramFiles%\Google\Chrome\Application. This one is located in %Windir%\Microsoft\Wirar\Microsoft

Detected by Malwarebytes as Backdoor.Agent.E. Note - this is not the legitimate Google Chrome browser which is normally located in %ProgramFiles%\Google\Chrome\Application. This one is located in %System%\InstallDir

Detected by McAfee as Spy-Agent.fg and by Malwarebytes as Trojan.Zbot

Detected by Malwarebytes as Trojan.Agent.JVGen. The file is located in %AppData%\Microsoft

Detected by Malwarebytes as Trojan.Agent. The file is located in %AppData%\Microsoft

Detected by McAfee as RDN/Generic.dx!it

Detected by Symantec as Trojan.Melongad and by Malwarebytes as Backdoor.CycBot. Note - this is not the legitimate Microsoft Windows 10/8/7 process with the same filename which is used to host the cmd.exe console window and is located in %System%. This one is located in %AppData%

Detected by Microsoft as Trojan:Win32/Sefnit.K. The "j6ggcxwtfm.cpl" file is located in %ProgramFiles%\anouicgfwkkv1v

Detected by Malwarebytes as Trojan.Agent.ED. The file is located in %AppData%\Malwarebytes

Detected by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %Windir%\Google Updater

Detected by Dr.Web as Trojan.DownLoader4.11626 and by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %AppData%\@off@

Detected by Malwarebytes as Trojan.IRCBot. The file is located in %AppData%\SubFolderName

Detected by McAfee as Generic Dropper.mk and by Malwarebytes as Backdoor.Agent.E

Detected by Trend Micro as TROJ_COBRA.GZ and by Malwarebytes as Trojan.Banker

Detected by Trend Micro as TROJ_AGENT.EBC and by Malwarebytes as Trojan.Downloader. The file is located in %UserTemp%

Detected by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %AppData%