Threat Search: 

ThreatExpert's Statistics for TROJ_NUWAR.GXZ [Trend Micro]:

TROJ_NUWAR.GXZ [Trend Micro] is also known as:
Threat AliasNumber of Incidents
Tibs-Packed [McAfee]2
Trojan.Erotpics [Symantec]2
Mal/EncPk-DA [Sophos]1
Trojan.Erotpics!sd6 [PC Tools]1
Trojan-Downloader.Win32.Exchanger.oz [Kaspersky Lab]1
TrojanDownloader:Win32/Cbeplay.E [Microsoft]1
Trojan-Dropper.Win32.Nuwar.ldt [Ikarus]1
TrojanDropper:Win32/Nuwar.gen!ldt [Microsoft]1

TROJ_NUWAR.GXZ [Trend Micro] is known to be created as:
%System%\cbevtsvc.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).