Threat Search: 

ThreatExpert's Statistics for TSPY_ARDAMAX.HR [Trend Micro]:

TSPY_ARDAMAX.HR [Trend Micro] is also known as:
Threat AliasNumber of Incidents
Trojan-Spy.Win32.Ardamax.t [Kaspersky Lab]87
Spy-Agent.cv [McAfee]83
Trojan-Spy.Win32.Ardamax [Ikarus]61
Suspicious.MH690 [Symantec]43
Spyware.Ardakey [Symantec]32
Dropper/Downloader.817294 [AhnLab]29
TrojanSpy:Win32/Ardamax.D [Microsoft]29
Mal/Generic-A [Sophos]24
Win-Trojan/Ardamax.14848.G [AhnLab]23
MonitoringTool:Win32/Ardamax [Microsoft]20
Trojan-Spy.Ardamax!sd6 [PC Tools]18
Trojan-Spy.Win32.Ardamax.e [Kaspersky Lab]16
Win32.SuspectCrc [Ikarus]13
Keylog-Ardamax.dr.gen [McAfee]12
Application.Ardamax_Keylogger [PC Tools]7
Win-Trojan/Ardamax.14848.B [AhnLab]7
TrojanSpy.Ardamax.HZ [PC Tools]6
Win-Trojan/Ardamax.14848.E [AhnLab]5
Backdoor.Graybird [Symantec]4
TrojanSpy.Ardamax.BI [PC Tools]4
TrojanSpy:Win32/Ardamax.C [Microsoft]4
TrojanSpy.Ardamax.AD [PC Tools]3
TrojanSpy.Ardamax.HD [PC Tools]3
Trojan-Spy.Win32.Ardamax.j [Kaspersky Lab]3
TrojanSpy.Ardamax.Q [PC Tools]2
Trojan-Spy.Win32.Ardamax.e [Ikarus]2
Keylog-Ardamax.dll [McAfee]1
Malware.Sality [PC Tools]1
TrojanSpy.Ardamax.ABZ [PC Tools]1
TrojanSpy.Ardamax.HJ [PC Tools]1
TrojanSpy.Ardamax.HT [PC Tools]1
TrojanSpy.Ardamax.RV [PC Tools]1
TrojanSpy.Ardamax.SQ [PC Tools]1
Virus.Win32.Sality.aa [Kaspersky Lab]1
Virus:Win32/Sality.AM [Microsoft]1
W32.Sality.AE [Symantec]1
W32/Polipos-A [Sophos]1
W32/Sality.gen [McAfee]1
W32/Sality-AM [Sophos]1
Win32/Kashu.B [AhnLab]1

TSPY_ARDAMAX.HR [Trend Micro] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation32
Germany4
Netherlands3
Belgium1

TSPY_ARDAMAX.HR [Trend Micro] is known to be created as:
%Temp%\2.exe
%Temp%\exporer32.exe
%Temp%\file3.exe
%Temp%\install.exe
%Windir%\install.exe
Notes:
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.