Detected by McAfee as RDN/Generic.dx!c2v and by Malwarebytes as Trojan.Agent.E

Detected by Dr.Web as Trojan.DownLoader6.27455 and by Malwarebytes as Trojan.Agent.PLC

Detected by Malwarebytes as Trojan.Banker.EMP. The file is located in %Windir%\srchasst\mui

Detected by Malwarebytes as Trojan.Agent. The file is located in %UserProfile%

Detected by Sophos as W32/Randex-FC

Detected by Malwarebytes as Spyware.Agent.E. The file is located in %AppData%\realtek

Detected by Sophos as W32/Rbot-FL

Detected by McAfee as RDN/Generic Dropper and by Malwarebytes as Backdoor.Agent.E

Added by a variant of Backdoor.Sdbot. The file is located in %System%

Detected by Symantec as W32.Holcas.A@mm. Note - this entry modifies the legitimate HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows "run" value data to include the file "Autoexec.com" (which is located in %Windir%)

Added by unidentified malware. The file is located in %Root%

Detected by Malwarebytes as Trojan.Agent.E.Generic. The file is located in %AppData%

Detected by Symantec as Infostealer.Revcuss.B. Note - this entry modifies the legitimate HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows "run" value data to include the file "audld.exe" (which is located in %Windir%)

Detected by Trend Micro as TROJ_DLOADER.AU and by Malwarebytes as Trojan.Agent. Note that this is not a valid Realtek process

Detected by McAfee as RDN/Generic Dropper and by Malwarebytes as Backdoor.Agent.E

Detected by Malwarebytes as Trojan.Banker.IM. The file is located in %AppData%\UpDown

Detected by Sophos as Troj/DwnLdr-KFX and by Malwarebytes as Backdoor.Agent

Detected by Dr.Web as Trojan.Siggen6.8070 and by Malwarebytes as Backdoor.Agent.RDT

Detected by Sophos as W32/Blic-A. Note - this entry modifies the legitimate HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows "run" value data to include the file "blackice.exe" (which is located in %System%)