Detected by Sophos as Troj/VB-XU

Detected by Trend Micro as WORM_AGOBOT.ALK

Detected by McAfee as RDN/Ransom and by Malwarebytes as Backdoor.Agent.E. Note - this entry either replaces or loads the legitimate "AppLaunch.exe" process which is located in %Windir%\Microsoft.NET\Framework\v2.0.50727. Which is the case is unknown at this time

Detected by Trend Micro as WORM_WOOTBOT.GE

Detected by Trend Micro as WORM_RBOT.AWY

Added by a variant of Backdoor:Win32/Rbot. The file is located in %System%

Detected by Sophos as Troj/Agent-MOV

Detected by Trend Micro as WORM_IPPEDO.B and by Malwarebytes as Worm.Rowmanti.E. Both files are located in %Root%\Google

Detected by Malwarebytes as Backdoor.Agent.BDB. The file is located in %AppData%\Microsoft\Speech

Detected by Sophos as W32/Sdbot-DJG and by Malwarebytes as Backdoor.Bot

Detected by Sophos as W32/Agobot-BG

Korean malware. The file is located in %ProgramFiles%\newbac

Detected by Malwarebytes as Trojan.Agent. The file is located in %LocalAppData%

Detected by Sophos as Troj/GBot-I

Detected by Malwarebytes as Adware.SanctionedMedia. The file is located in %System%

Detected by Trend Micro as WORM_SDBOT.ACJ

Sysinternals Antivirus rogue security software - not recommended, removal instructions here

Detected by Symantec as W32.Ahker.D@mm. Note - for the valid Norton AV entry the filename is "navapexe" and this is also not the valid Norton AV file with the same filename

Detected by Symantec as W32.HLLW.Gaobot.AO