Threat Search: 

ThreatExpert's Statistics for Win32/Zhelatin.worm.78848.E [AhnLab]:

Win32/Zhelatin.worm.78848.E [AhnLab] is also known as:
Threat AliasNumber of Incidents
Mal/EncPk-DA, Mal/TibsPak [Sophos]1
TROJ_TIBS.QQ [Trend Micro]1
Trojan-Downloader.Win32.Exchanger [Ikarus]1
Trojan-Downloader.Win32.Exchanger.jt [Kaspersky Lab]1

Win32/Zhelatin.worm.78848.E [AhnLab] is known to be created as:
%System%\cbevtsvc.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).