Threat Search: 

ThreatExpert's Statistics for Win-Trojan/Ardamax.662528 [AhnLab]:

Win-Trojan/Ardamax.662528 [AhnLab] is also known as:
Threat AliasNumber of Incidents
Generic PWS.y [McAfee]9
Mal/Generic-A [Sophos]9
Spyware.Ardakey [Symantec]9
Trojan-Spy.Win32.Ardamax.ads [Kaspersky Lab]9
Virus.Win32.Ardamax.CI [Ikarus]9
Spyware.Ardakey!sd6 [PC Tools]6

Win-Trojan/Ardamax.662528 [AhnLab] is known to be created as:
%System%\28463\ernk.exe
%System%\28463\hdnb.exe
%System%\28463\jfoq.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).