Detected by McAfee as RDN/Generic Dropper!ge and by Malwarebytes as Backdoor.Agent

Detected by Malwarebytes as Ransom.Jigsaw. The file is located in %AppData%\rsystem

Detected by Trend Micro as TSPY_BANCOS.DK. Note the space at the beginning of the filename

Detected by Symantec as Trojan.Hotword.B. Note - this is not the legitimate svchost.exe process which is always located in %System%. This one is also located in %System% but has a space at the beginning of the filename

Detected by Trend Micro as TROJ_DLOADER.MJF

Detected by Dr.Web as Trojan.Inject.45984

Detected by Malwarebytes as Trojan.Banker.VMP. The file is located in %UserProfile%\5p0F0e4H8P5S2z

Detected by Malwarebytes as Trojan.Agent.E. The file is located in %UserProfile%\rundll32

Detected by Sophos as Troj/Roamer-A

Detected by Malwarebytes as Trojan.Banker.IM. The file is located in %AppData%\WireX

Detected by McAfee as RDN/Generic PWS.y!tr and by Malwarebytes as Trojan.Banker.E

Detected by Trend Micro as WORM_RJUMP.D and by Malwarebytes as Worm.RJump

Detected by Sophos as Troj/QQPass-AK

Detected by Sophos as Troj/QQPass-AJ

Detected by McAfee as W32/Sdbot.worm!jt

Detected by Malwarebytes as Trojan.Agent.MNR. The file is located in %AppData%\windos

Detected by Malwarebytes as Trojan.Agent.RKN.Generic. Loads via the HKCU\RunOnce registry key and the file is located in %UserTemp%\subfolder

Detected by Trend Micro as ADW_LOOPAD.A

Detected by McAfee as RDN/Sdbot.bfr!d and by Malwarebytes as Backdoor.IRCBot.RSGen