Threat Search: 

ThreatExpert's Statistics for Troj/User32Hk-A [Sophos]:

Troj/User32Hk-A [Sophos] is also known as:
Threat AliasNumber of Incidents
Virus:Win32/Mariofev.A [Microsoft]239
Trojan.Patched!sd6 [PC Tools]226
Patched User32 [McAfee]175
Trojan.Win32.Patched.bb [Kaspersky Lab]167
Trojan.Win32.Patched.dr [Kaspersky Lab]134
Trojan.Win32.Patched [Ikarus]85
Win-Trojan/User32Hk [AhnLab]76
Trojan.Win32.Patched.gq [Kaspersky Lab]50
Generic.dx [McAfee]18
Trojan.Win32.Patched.bb [Ikarus]5
Trojan.Patched!sd5 [PC Tools]2
Trojan.Win32.Patched.dr [Ikarus]2
W32.Spamuzle!inf [Symantec]2
TROJ_PATCHED.BC [Trend Micro]1
Trojan.Patched.dr.c [PC Tools]1

Troj/User32Hk-A [Sophos] has the following possible countries of origin:
OriginNumber of Incidents
Czech Republic1
Denmark1
Germany1
Italy1
Poland1
Republic of Korea1
Russian Federation1

Troj/User32Hk-A [Sophos] is known to be created as:
%System%\dllcache\user32.dll
%Temp%\infected\user32.dll
%Temp%\windows\system32\user32.dll
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).