Troj/Cbeplay-A is a downloader Trojan for the Windows platform.
When first run Troj/Cbeplay-A copies itself to <System>\CbEvtSvc.exe.
The file CbEvtSvc.exe is registered as a new system driver service named "CbEvtSvc", with a display name of "CbEvtSvc" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:
HKLM\SYSTEM\CurrentControlSet\Services\CbEvtSvc