Detected by Malwarebytes as Trojan.Spyeyes.HE. The file is located in %Root%\systemhost

Detected by Microsoft as Backdoor:Win32/Bezigate.A

Added by a variant of Backdoor:Win32/Rbot. The file is located in %System%

Detected by Sophos as W32/Agobot-M

Detected by Malwarebytes as Trojan.FakeAlert. The file is located in %Temp%

Detected by Dr.Web as Trojan.Siggen6.22766 and by Malwarebytes as Backdoor.Agent.E

Detected by Dr.Web as Trojan.StartPage.39111 and by Malwarebytes as Backdoor.Bot

Detected by Sophos as W32/Autorun-NG and by Malwarebytes as Backdoor.Bot. Note - this is not the legitimate Google Chrome browser which is normally located in %ProgramFiles%\Google\Chrome\Application. This one is located in %System%

Detected by McAfee as RDN/Generic.dx and by Malwarebytes as Backdoor.Agent.CRPGen

Detected by Symantec as W32.Yazz and by Malwarebytes as Trojan.Agent

Detected by McAfee as Generic Downloader.x

Detected by Trend Micro as WORM_SDBOT.BGF

Detected by McAfee as Generic.dx and by Malwarebytes as Trojan.Banker

Detected by Trend Micro as WORM_SDBOT.BGF

Detected by Malwarebytes as Trojan.Injector. The file is located in %Windir%\lwah

Detected by Malwarebytes as Backdoor.Bot. The file is located in %AppData%\Mozilla\Firefox\Profiles\ah86929x.default\webapps

Detected by Trend Micro as BKDR_PROSTI.AA

Detected by McAfee as RDN/Generic PWS.y!jp and by Malwarebytes as Backdoor.Agent. Note - the legitimate Windows Explorer (same filename) is located in %Windir%. This one is located in %UserStartup%

Detected by McAfee as RDN/Generic.dx!w and by Malwarebytes as Backdoor.Agent. Note - the legitimate Windows Explorer (same filename) is located in %Windir%. This one is located in %System%\install