TrojanDownloader:Win32/Nonaco.J installs other malware including TrojanClicker:Win32/Zirit.Y and Trojan:Win32/Adclicker.KT. The installed malware visits a specific website repeatedly with a related side-affect to increase pay-per-click counts associated with the malware. It may also display pop-ups and download other malware from the predefined website.

TrojanDownloader:Win32/Popuper.A attempts to download unwanted software from a remote Web site. The content could include anything from additional downloader Trojans to imitation security programs.

Trojan:Win32/Refpron.A is a component of the Win32/Refpron family that may be used to collect per-click advertising payments from specified web sites.

TrojanDownloader:Win32/Zlob.gen!M is generic detection for a component of the greater Win32/Zlob family. Win32/Zlob refers a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.