ThreatExpert's Statistics for W32/Xema [McAfee]:

W32/Xema [McAfee] is also known as:

Threat Alias Number of Incidents Troj/Agent-FXF [Sophos] 9 Trojan-Spy.Win32.Agent.afn [Kaspersky Lab] 9 W32.Xema.A!inf [Symantec] 9 Win32/Shlnom [AhnLab] 6 Trojan-Spy.Win32.Agent.qj [Ikarus] 4 TrojanDropper:Win32/Dunik!rts [Microsoft] 3 Trojan-Spy.Agent!sd6 [PC Tools] 3 TrojanSpy.Agent.DKZR [PC Tools] 3 TrojanSpy.Agent.CYWH [PC Tools] 1 Trojan-Spy.Win32.Agent.qj [Kaspersky Lab] 1 W32.Xema.A [Symantec] 1 Win-Trojan/Agent.64512.T [AhnLab] 1 WORM_AGENT.TBW [Trend Micro] 1

W32/Xema [McAfee] has the following possible country of origin:

Origin Number of Incidents China 3

W32/Xema [McAfee] is known to be created as:

%System%\shlmon.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).