Detected by Malwarebytes as Trojan.Agent - where # represents one or more digits. The file is located in %Windir% - see an example here

Detected by Dr.Web as Trojan.DownLoader12.19100 and by Malwarebytes as Trojan.Downloader.ATP. Note the space at the beginning of the filename and the upper case "i" in place of a lower case "L"

Detected by Malwarebytes as Trojan.PasswordStealer. The file is located in %AppData%\Microsoft - see examples here and here

Detected by Malwarebytes as Backdoor.IRCBot.Gen. Note - this is not the legitimate svchost.exe process which is always located in %System%. This one is located in %Windir% and has a space at the beginning of the filename

Detected by Malwarebytes as Backdoor.Messa

Detected by Trend Micro as WORM_SDBOT.PB. Note the space at the beginning of the filename

Detected by Dr.Web as Trojan.Hosts.13138 and by Malwarebytes as Trojan.Downloader

Detected by Sophos as Troj/Monbot-A

Detected by Sophos as W32/Mytob-IS and by Malwarebytes as Backdoor.Agent

Added by a variant of Backdoor:Win32/Rbot - where * represents a random character. The file is located in %System%

Detected by Malwarebytes as Backdoor.Agent.DC. The file is located in %UserTemp%

Detected by Malwarebytes as Trojan.Agent.WS - where # represents a digit, see examples here and here

Detected by Kaspersky as Backdoor.Win32.Rbot.kts and by Malwarebytes as Backdoor.Agent.Gen. Note that the target is a Windows Alternate Data Stream (ADS)

Detected by Malwarebytes as Trojan.Agent.E - where # represents a digit. The file is located in %AppData%\AcompanyXXX\aproductXXX

Detected by Kaspersky as Backdoor.Win32.Poison.ldq. Note that the target is a Windows Alternate Data Stream (ADS)

Detected by Sophos as Troj/VB-FHF and by Malwarebytes as Backdoor.Bot

Detected by Kaspersky as Backdoor.Win32.Poison.arnv. Note that the target is a Windows Alternate Data Stream (ADS)

Detected by Malwarebytes as Spyware.OnlineGames - where # represents one or more digits. The file is located in %Windir% - see examples here and here

Detected by Dr.Web as Trojan.DownLoader6.47245 and by Malwarebytes as Trojan.Backdoor. Note that the target is a Windows Alternate Data Stream (ADS)