Detected by Malwarebytes as Trojan.Agent.AI. Note that the target is a Windows Alternate Data Stream (ADS)

Detected by Sophos as W32/Punya-B

Detected by Malwarebytes as Trojan.Fakecleaner. The file is located in %AppData%

Detected by Malwarebytes as Trojan.Downloader. The file is located in %AppData%

Detected by Malwarebytes as Trojan.SpyEyes.RGen. The file is located in %Root%\halflive

Detected by Dr.Web as Trojan.DownLoader4.11626 and by Malwarebytes as Backdoor.Agent.RGen

Detected by Dr.Web as Trojan.DownLoader8.44064 and by Malwarebytes as Trojan.Agent.UPDGen

Detected by Dr.Web as Trojan.DownLoader9.10577 and by Malwarebytes as Trojan.Agent

Detected by Malwarebytes as Backdoor.Agent.E. The files is located in %AppData%\ViaFolder

AdServerNow adware

Detected by Malwarebytes as Trojan.Agent. Note - this is not the legitimate Adobe "AdobeUpdater.exe" file for older versions of Adobe products which is normally located in %CommonFiles%\Adobe\Updater5. This one is located in %ProgramFiles%\Adobe

Detected by McAfee as RDN/Generic.dx!dhn and by Malwarebytes as Backdoor.Agent.E

Detected by Sophos as W32/Anacon-C

Detected by Malwarebytes as Trojan.Agent.MA. The file is located in %AppData%\Microsoft

Detected by Dr.Web as Trojan.DownLoader11.13910 and by Malwarebytes as Trojan.Agent

Detected by Microsoft as PWS:Win32/Savnut and by Malwarebytes as Trojan.Agent

Detected by McAfee as Generic.dx!ujd and by Malwarebytes as Trojan.Append

Detected by Dr.Web as Trojan.DownLoader12.24441 and by Malwarebytes as Trojan.Agent

Detected by Dr.Web as Win32.HLLW.Autoruner2.15763 and by Malwarebytes as Worm.AutoRun.E