Detected by Malwarebytes as Trojan.Agent.WinOpt. The file is located in %System%

Detected by McAfee as RDN/Generic.tfr and by Malwarebytes as Trojan.Agent.MNRGen. The file is located in %LocalAppData%\OpenMin (10/8/7/Vista) or %UserProfile%\Local Settings\OpenMin (XP)

Detected by McAfee as RDN/Generic.bfr!bw and by Malwarebytes as Backdoor.Agent

Detected by Symantec as Trojan.Scarimson and by Malwarebytes as Trojan.Agent.MSIL.Generic

Detected by Dr.Web as Trojan.Inject1.36990

Detected by Sophos as W32/Kangaroo-A. Note - this is not the legitimate MS Word process of the same name, which is always located in a sub-folder of %ProgramFiles%\Microsoft Office. This one is located in %System%

Detected by Sophos as Troj/Banker-EHZ

Detected by Dr.Web as Trojan.DownLoader6.49883

Added by a variant of W32.IRCBot. The file is located in %System%. Note that there is a space at the end of the "Startup Item" field

Detected by McAfee as RDN/Generic Downloader.x!cb and by Malwarebytes as Trojan.Banker

Detected by McAfee as RDN/Generic.bfr and by Malwarebytes as Backdoor.Agent.DCE

Detected by Malwarebytes as Trojan.Inject.E. The file is located in %CommonAppData%

Detected by McAfee as RDN/Generic.dx!dbb and by Malwarebytes as Trojan.Agent.VBS. Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "Obfuscated.vbs" file is located in %Temp%

XP Antivirus rogue security software variant - not recommended. Detected by Microsoft as Rogue:Win32/FakeXPA and by Malwarebytes as Rogue.XPantiVirus. The file is located in %ProgramFiles%\XP Antivirus

Detected by McAfee as FakeAlert-SpyPro.gen.bb

Detected by Malwarebytes as Ransom.CryptoShield. The file is located in %Temp%

Detected by Trend Micro as TROJ_AGENT.RLH

Detected by Malwarebytes as Trojan.PasswordStealer.SBI. The file is located in %AppData%\[folder]

Detected by Malwarebytes as Worm.AutoRun. The file can be located in %Windir%, %System% or %Temp% - see examples here and here