The Dyre banking trojan uses NtQueueApcThread for code injection -- cuckoomon wasn't hooking this so we couldn't properly detect its activity.  Add this so we can fix up community signature modules to handle this as well.