Detected by McAfee as Generic BackDoor

Detected by McAfee as RDN/Ransom!a and by Malwarebytes as Trojan.Ransom

Detected by Trend Micro as WORM_ARGEN.A

Detected by Sophos as Troj/Renos-EH and by Malwarebytes as Trojan.Downloader - where ? represents a single character

Detected by Malwarebytes as Trojan.SpyEyes.Gen. The file is located in %Root%\config.bin

Detected by Symantec as W32.Erkez.G@mm

Detected by Dr.Web as Trojan.DownLoader11.6826 and by Malwarebytes as Trojan.Agent

Detected by Malwarebytes as Spyware.OnlineGames. The file is located in %System%\Zirios

Detected by Malwarebytes as Trojan.Downloader. The file is located in %UserTemp%

Detected by Sophos as W32/Maldal-C

Detected by Malwarebytes as Trojan.PasswordStealer.MSIL. The file is located in %AppData%\SubDir

Detected by Sophos as W32/Agobot-AGD

Detected by Malwarebytes as Adware.SanctionedMedia. The file is located in %System%

Detected by McAfee as W32/Vote.b@MM

Homepage hi-jacker that re-defines your IE or Netscape start page

Detected by McAfee as RDN/Generic.bfr!fg and by Malwarebytes as Trojan.StartPage. Note that we've modified the target URL to replace the http with h**p

Detected by Sophos as W32/Forbot-CP and by Malwarebytes as Backdoor.Bot. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer. This one is located in %System%

Detected by McAfee as PWS-Banker and by Malwarebytes as Trojan.Banker.ZS

Detected by McAfee as RDN/Generic PWS.y!wg and by Malwarebytes as Trojan.Agent.E