Detected by Malwarebytes as Backdoor.Agent. The file is located in %UserTemp%

Detected by Malwarebytes as Trojan.Bitminer. The file is located in %UserProfile%\AppData\OpenMin

Detected by Dr.Web as Trojan.Inject1.27131 and by Malwarebytes as Backdoor.Agent.E. Note that the target is a Windows Alternate Data Stream (ADS)

Detected by McAfee as RDN/Generic.dx!dc3 and by Malwarebytes as Backdoor.Agent.E. Note the space at the beginning of the filename

Detected by Malwarebytes as Trojan.MWF.Gen - where * represents a random character. The file is located in %System%

Premium rate adult content dialer - where # represents a random digit. The file is located in %ProgramFiles%\DiallerProgram

Detected by Malwarebytes as Trojan.Agent - where # represents a digit. The file is located in %UserTemp%

Detected by Malwarebytes as Trojan.FakeAlert - where * represents a letter. The file is located in %Temp%

Detected by McAfee as RDN/Generic BackDoor!sq and by Malwarebytes as Backdoor.Agent.E

Detected by Malwarebytes as Trojan.Agent.MUGen - where * represents digits. The file is located in %UserTemp%

Detected by McAfee as RDN/Generic.bfr and by Malwarebytes as Backdoor.PasswordStealer

Detected by McAfee as RDN/Generic.bfr and by Malwarebytes as Backdoor.Agent.DCE

Detected by McAfee as Trojan-FCXZ!CA48CBA394C5 and by Malwarebytes as Backdoor.Agent.DCE

Detected by Malwarebytes as Trojan.MSIL. The file is located in %UserTemp%

Added by unidentified malware. The file is located in %System%

Detected by McAfee as RDN/Generic BackDoor and by Malwarebytes as Backdoor.IRCBot.E

Added by a variant of Backdoor:Win32/Rbot - where * represents a random character. The file is located in %System%

Detected by Sophos as W32/Rbot-WH - where * represents a random character

Added by a variant of Backdoor:Win32/Rbot - where * represents a random character. The file is located in %System%