Threat Search: 

ThreatExpert's Statistics for WORM_NUWAR.AAL [Trend Micro]:

WORM_NUWAR.AAL [Trend Micro] is also known as:
Threat AliasNumber of Incidents
W32/Nuwar@MM [McAfee]20
Backdoor:Win32/Nuwar.A [Microsoft]17
Trojan.Peacomm [Symantec]9
Trojan.Peacomm.D [Symantec]9
W32/Nuwar-E [Sophos]9
Troj/Dorf-BP, Mal/Dorf-O [Sophos]8
Email-Worm.Win32.Zhelatin.aan [Kaspersky Lab]7
Trojan-Downloader.Win32.Cntr.by [Kaspersky Lab]7
Worm.DR.Zhelatin.Gen!Pac.11 [PC Tools]5
Email-Worm.Win32.Zhelatin.zy [Ikarus]3
Email-Worm.Win32.Zhelatin.ace [Kaspersky Lab]2
Email-Worm.Win32.Zhelatin.ace [Ikarus]1
Email-Worm.Win32.Zhelatin.acq [Kaspersky Lab]1
Trojan.Peacomm!sd6 [PC Tools]1
Win32/Zhelatin.worm.119296.HA [AhnLab]1
Win-Trojan/Xema.variant [AhnLab]1

WORM_NUWAR.AAL [Trend Micro] is known to be created as:
%Windir%\mssecurity.exe
%Windir%\msvecurity.exe
%Windir%\msvupdater.exe
Note: %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.