Threat Search: 

ThreatExpert's Statistics for Trojan-Spy.Win32.Ardamax.ads [Kaspersky Lab]:

Trojan-Spy.Win32.Ardamax.ads [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
Generic PWS.y [McAfee]9
Mal/Generic-A [Sophos]9
Spyware.Ardakey [Symantec]9
Virus.Win32.Ardamax.CI [Ikarus]9
Win-Trojan/Ardamax.662528 [AhnLab]9
Spyware.Ardakey!sd6 [PC Tools]6

Trojan-Spy.Win32.Ardamax.ads [Kaspersky Lab] is known to be created as:
%System%\28463\ernk.exe
%System%\28463\hdnb.exe
%System%\28463\jfoq.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).