Troj/Inject-EW is a Trojan for the Windows platform.
When first run, Troj/Inject-EW copies itself to:
<System32>\twex.exe
And alters the following registry entries:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
<System32>\userinit.exe, <System32>\twex.exe
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters
\FirewallPolicy\StandardProfile\EnableFirewall
0x00000000
Once running, Troj/Inject-EW stealths itself to avoid detection.