ThreatExpert's Statistics for WORM_AGENT.TBW [Trend Micro]:

WORM_AGENT.TBW [Trend Micro] is also known as:

Threat Alias	Number of Incidents
Trojan-Spy.Win32.Agent.qj [Kaspersky Lab]	12
W32.Xema.A [Symantec]	8
TrojanSpy.Agent.CZRD [PC Tools]	6
Trojan-Spy.Win32.Agent.qj [Ikarus]	5
Win-Trojan/Xema.121020 [AhnLab]	3
Troj/Agent-FXF [Sophos]	2
Bloodhound.Unknown [Symantec]	1
Trojan-Spy.Agent!sd5 [PC Tools]	1
TrojanSpy.Agent.CYWH [PC Tools]	1
TrojanSpy:Win32/Agent [Microsoft]	1
W32/Gaobot.worm.gen [McAfee]	1
W32/Xema [McAfee]	1
Win-Trojan/Agent.64512.T [AhnLab]	1
Win-Trojan/Agent.80060 [AhnLab]	1

WORM_AGENT.TBW [Trend Micro] has the following possible country of origin:

Origin		Number of Incidents
	China	11

WORM_AGENT.TBW [Trend Micro] is known to be created as:

%Programs%\startup\officexp.exe

%System%\serlibk.exe

Notes:

%Programs% is a variable that refers to the file system directory that contains the user's program groups. A typical path is C:\Documents and Settings\[UserName]\Start Menu\Programs.
%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).