Detected by Sophos as Troj/Dropper-PS

Detected by Symantec as W32.Remabl.Worm. This entry loads from the "run=" section of WIN.INI (in %Windir%) on Win9x/Me and the "cnf.bat" file is located in %Windir%

Detected by Dr.Web as Trojan.DownLoader9.10874

Detected by McAfee as RDN/Downloader.a!no and by Malwarebytes as Trojan.Agent

Detected by Malwarebytes as Trojan.Inject. Note - this is not the legitimate Microsoft Windows 10/8/7 process with the same filename which is used to host the cmd.exe console window and is located in %System%. This one is located in %AppData%\RealNetwork

Detected by Malwarebytes as Trojan.Agent. Note - this is not the legitimate Microsoft Windows 10/8/7 process with the same filename which is used to host the cmd.exe console window and is located in %System%. This one is located in %AppData%\Microsoft

Detected by McAfee as RDN/Generic.dx!d2q and by Malwarebytes as Trojan.Agent.RNUD

Detected by Malwarebytes as Spyware.Agent.E. The file is located in %System%\sistema

Detected by Symantec as Backdoor.Sokacaps and by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %Windir%\Media

Detected by Dr.Web as Trojan.DownLoader10.57575 and by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %UserProfile%\D12N

Detected by Trend Micro as WORM_BOBAX.AD and by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %Windir%

Detected by Dr.Web as Trojan.Siggen6.8055 and by Malwarebytes as Backdoor.Agent.Gen

Detected by Sophos as Troj/Ciadoor-J and by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %Windir%

Detected by Sophos as W32/IRCBot-XV and by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process

CasinoOnline foistware. The file is located in %ProgramFiles%\CasinoOnline

Detected by Malwarebytes as Trojan.Agent. The file is located in %AppData%

Detected by Symantec as Trojan.Gutta and by Malwarebytes as Trojan.Agent. Note - this is not the legitimate csrss.exe process which is always located in %System%. This one is located in %Windir%

Detected by Malwarebytes as Trojan.Agent.E

Detected by Sophos as Troj/MSIL-BNO and by Malwarebytes as Backdoor.Agent.TRJ