Detected by McAfee as RDN/Generic.hra and by Malwarebytes as Backdoor.Agent.DCE

Detected by Symantec as W32.SillyFDC. The file is located in %System%

On Clean rogue security software - not recommended, removal instructions here

Detected by McAfee as RDN/Generic BackDoor!bbq and by Malwarebytes as Backdoor.Agent.DCGen

Update utility for software from Openwares.org which was known to host software bundled with malware (see here) and is no longer available. Detected by McAfee as New Malware.bl

Detected by Dr.Web as Trojan.MulDrop4.63968 and by Malwarebytes as Trojan.Agent.NL

Detected by Malwarebytes as Trojan.Agent. The file is located in %LocalAppData%\oxyload

Detected by McAfee as RDN/Generic.bfr!ff and by Malwarebytes as Trojan.Agent.E

Detected by Malwarebytes as Trojan.Downloader.OCX. The file is located in %AppData%\Microsoft\W64

Detected by Sophos as W32/Rbot-ACS

Detected by McAfee as Generic.dx and by Malwarebytes as Backdoor.Agent

Detected by Dr.Web as Trojan.DownLoader10.21794 and by Malwarebytes as Trojan.Agent.MNRGen

Detected by Malwarebytes as Trojan.Agent. The file is located in The file is located in %LocalAppData% (10/8/7/Vista) or %UserProfile%\Local Settings (XP)

Detected by Malwarebytes as Trojan.Banker.DF. The file is located in %LocalAppData%

MStart2Page - Switch dialer and hijacker variant, see here. Also detected by Sophos as Dial/Switch-E

Detected by McAfee as RDN/Generic.bfr!fg and by Malwarebytes as Backdoor.Agent.MSGen

MStart2Page - Switch dialer and hijacker variant, see here. Also detected by Sophos as Dial/Switch-E

Added by a variant of Backdoor:Win32/Rbot. Note - this should not be confused with the legitimate Outlook Express file which has the filename "msimn.exe" and is located in %ProgramFiles%\Outlook Express. The file is located in %System%

Detected by Sophos as W32/Rbot-GUE