Win-Trojan/Ardamax.403456 [AhnLab] is known to be created as:
%ProgramFiles%\htv\akv.exe
%System%\28463\akv.exe
%Windir%\28463\akv.exe
Notes:
%ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.