Threat Search: 

ThreatExpert's Statistics for Trojan-Spy.Win32.Agent.amhu [Kaspersky Lab]:

Trojan-Spy.Win32.Agent.amhu [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
Trojan.Crypt [Ikarus]19
Mal/Dorf-F, Mal/EncPk-HL, Mal/FakeVirPk-A [Sophos]18
Trojan Horse [Symantec]6
FakeAlert-CK.dll [McAfee]3
Trojan:Win32/Fakeinit [Microsoft]3
Trojan-Spy.Agent!sd6 [PC Tools]3
Win-Trojan/Agent.27648.JB [AhnLab]3
Mal/FakeVirPk-A [Sophos]2

Trojan-Spy.Win32.Agent.amhu [Kaspersky Lab] is known to be created as:
%System%\dllcache\userinit.exe
%Temp%\mousehook.dll
%Temp%\ntdll64.dll
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).