Detected by Malwarebytes as Trojan.Agent.DF. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts

Adware.ISMonitor/Adware.Adsponsor variant - detected by Malwarebytes as Adware.ISM. The file is located in %ProgramFiles%\QdrModule

Detected by Dr.Web as Trojan.DownLoad3.34015 and by Malwarebytes as Trojan.Agent.US

Detected by Malwarebytes as Backdoor.Agent.E - where # represents a digit. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts - see an example here

Adware.ISMonitor/Adware.Adsponsor variant - detected by Malwarebytes as Adware.ISM. The file is located in %ProgramFiles%\QdrModule

Detected by Sophos as W32/Agobot-OJ

Detected by McAfee as PWSZbot-FLN!1E4563A9BEF1 and by Malwarebytes as Trojan.Agent.US

Adware.ISMonitor/Adware.Adsponsor variant - detected by Malwarebytes as Adware.ISM. The file is located in %ProgramFiles%\QdrModule

Detected by Malwarebytes as Spyware.Keylogger.H. The file is located in %System%\UCJNNV

Detected by Kaspersky as the WEBBER.M TROJAN!

Adware.ISMonitor/Adware.Adsponsor variant - detected by Malwarebytes as Adware.ISM. The file is located in %ProgramFiles%\QdrModule

Detected by Malwarebytes as Worm.SFDC. The file is located in %UserProfile%

Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not the legitimate Apple "Quick Time" viewer that has the same startup name and filename and is normally located in %ProgramFiles%\QuickTime. This one is located in %ProgramFiles%\WebMediaViewer

Detected by Malwarebytes as Trojan.Dropper. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts

CoolWebSearch Therealsearch parasite variant

Adware.ISMonitor/Adware.Adsponsor variant - detected by Malwarebytes as Adware.ISM. The file is located in %ProgramFiles%\QdrPack

Detected by Malwarebytes as Trojan.Agent.US. The file is located in %UserProfile%

Detected by Sophos as Troj/Progent-A and by Malwarebytes as Backdoor.ProRat

Detected by Malwarebytes as Trojan.Agent.AI. Note - this is not the legitimate Apple "Quick Time" viewer that is normally located in %ProgramFiles%\QuickTime. This one is located in %AllUsersStartup% and its presence there ensures it runs when Windows starts