From Microsoft's site:
TrojanSpy:Win32/Nivdort.CW
Alert level: Severe
Also detected as: Trojan.Win32.Agent.ihpl (Kaspersky), Trojan-FHOH!885352259A4D (McAfee), Troj/Nivdort-BV (Sophos), TROJ_BAYROB.SM4 (Trend Micro),

Avast is also picking it up.

We have the corporate version of MS "System Centre Endpoint Protection" and of course it removes it too.
_________________________
Dan Desautels
DezTek Solutions Inc.
Thunder Bay, ON