ThreatExpert's Statistics for Trojan-Downloader.Win32.Exchanger.mn [Kaspersky Lab]:

Trojan-Downloader.Win32.Exchanger.mn [Kaspersky Lab] is also known as:

Threat Alias	Number of Incidents
Downloader [Symantec]	2
Mal/EncPk-DA [Sophos]	2
TROJ_AGENT.KBE [Trend Micro]	2
TrojanDownloader:Win32/Cbeplay.E [Microsoft]	2
BackDoor-DNM [McAfee]	1
Downloader.gen.a [McAfee]	1
Mal/EncPk-DA, Mal/TibsPak [Sophos]	1
Trojan-Downloader.Exchanger!sd6 [PC Tools]	1

Trojan-Downloader.Win32.Exchanger.mn [Kaspersky Lab] is known to be created as:

%System%\cbevtsvc.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).