Detected by Sophos as W32/Sdbot-US

Detected by Malwarebytes as Trojan.FakeJava. The file is located in %UserProfile%\fq91855Q61425

Detected by Malwarebytes as Backdoor.SpyNet. The file is located in %System%\Internet Explorer

Detected by Sophos as W32/Forbot-GS

Detected by Sophos as W32/AutoRun-AKR and by Malwarebytes as Trojan.FakeFolder

Detected by Dr.Web as Trojan.DownLoader9.10873

Detected by Trend Micro as TROJ_KILLAV.KAX. Note - this is not the legitimate KeepSafe from Stardock Corporation which has the same filename and is normally located in a %ProgramFiles%\Stardock sub-folder. This one is located in %System%

Detected by Dr.Web as Trojan.Siggen5.32817 and by Malwarebytes as Trojan.QQPass

Detected by Symantec as Backdoor.IRC.Bot. The file is located in %System%

Detected by Trend Micro as TROJ_BUZUS.BFN and by Malwarebytes as Trojan.Agent

Detected by McAfee as Generic.dx!bdm4 and by Malwarebytes as Backdoor.Agent

Detected by Dr.Web as BackDoor.Bladabindi.7712 and by Malwarebytes as Backdoor.Agent.TRJ

Detected by Kaspersky as Backdoor.Win32.VB.mst. The file is located in %Temp%

Detected by McAfee as RDN/Downloader.a!ox and by Malwarebytes as Trojan.Agent.RND

Detected by McAfee as RDN/Generic.bfr!hu and by Malwarebytes as Backdoor.Agent.MWT

Detected by McAfee as RDN/Generic.dx!dfq and by Malwarebytes as Backdoor.Agent.E

Detected by Malwarebytes as Trojan.Agent. The file is located in %AppData%

Detected by Dr.Web as Trojan.DownLoader13.6784 and by Malwarebytes as Trojan.Downloader.XPS

Detected by Malwarebytes as Trojan.Agent.E. The file is located in %MyDocuments%\x2C