Detected by Malwarebytes as Trojan.Agent.E. The file is located in %LocalAppData%\ylyle

Detected by Malwarebytes as Trojan.Injector. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts

Detected by Malwarebytes as Worm.SFDC. The file is located in %UserProfile%

Detected by Malwarebytes as Trojan.Backdoor. The file is located in %Windir%\system3232

Detected by Dr.Web as Trojan.Siggen3.8833 and by Malwarebytes as Trojan.Agent

Detected by Malwarebytes as Trojan.Agent.E. The file is located in %Windir%\Yahoo Chat Protection

Detected by McAfee as PWS-LegMir.dll and by Malwarebytes as PasswordStealer.Lmir

Detected by Malwarebytes as Worm.SFDC. The file is located in %UserProfile%

Added by a variant of the SDBOT.62235D21 WORM!

Detected by Sophos as W32/Brontok-AK

Detected by Malwarebytes as Backdoor.Turkojan. The file is located in %Windir%

Detected by Sophos as Troj/FakeAV-CYN

Detected by Sophos as W32/LegMir-BM

Detected by Malwarebytes as Trojan.Banload. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts

Detected by Malwarebytes as Trojan.Agent. The file is located in %AppData%\yqbcfolmuryzdhbzilzi

Detected by Dr.Web as Trojan.DownLoader7.29662

Detected by McAfee as Generic.dx!kwv and by Malwarebytes as Trojan.Agent

Detected by Malwarebytes as Trojan.Agent. The file is located in %Temp% - see examples here and here

Detected by Malwarebytes as Backdoor.Bot.RN