Detected by Symantec as Adware.Broadcastpc

Detected by McAfee as RDN/PWS-Banker!dk and by Malwarebytes as Trojan.Banker.CPLGen

Detected by Dr.Web as Trojan.DownLoader11.12381 and by Malwarebytes as Trojan.Agent.E

Detected by Sophos as Troj/Agent-GYY

Detected by Symantec as W32.SillyFDC.BDM and by Malwarebytes as Worm.SFDC

Detected by McAfee as RDN/Generic FakeAlert and by Malwarebytes as Backdoor.Agent.RNGen

Detected by Malwarebytes as Backdoor.Bladabindi. The file is located in %AppData%

Detected by Sophos as W32/Rbot-AJF

Detected by Sophos as Troj/Celine-A. Note - this entry modifies the legitimate HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows "run" value data to include the file "Celine.scr" (which is located in %Root%)

Detected by Sophos as Troj/Squatbot-C

Added by a variant of Backdoor:Win32/Rbot

Backdoor.Win32.Asylum.013.e malware. Note - this entry modifies the legitimate HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows "run" value data to include the file "cfgsys32.exe" (which is located in %Windir%)

Detected by Malwarebytes as Backdoor.Agent. Note - this is not the legitimate Google Chrome browser which is normally located in %ProgramFiles%\Google\Chrome\Application. This one is located in %System%

Detected by Malwarebytes as Backdoor.Messa. Note - this is not the legitimate Google Chrome browser which is normally located in %ProgramFiles%\Google\Chrome\Application. This one is located in %AppData%\updater

Detected by Sophos as Troj/RemLoad-A

Detected by Malwarebytes as Backdoor.Agent.DCE. The file is located in %ProgramFiles%\Mozilla Firefox

Detected by Dr.Web as Trojan.DownLoader7.22362 and by Malwarebytes as Trojan.MSIL

Detected by Symantec as W32.Refaz. This entry loads from the "run=" section of WIN.INI (in %Windir%) on Win9x/Me``

Detected by Dr.Web as Trojan.DownLoader5.31016 and by Malwarebytes as Trojan.Agent