Thursday, October 1, 2009

I have noticed file called RavMonE.exe in my system folder.Is this a virus/spyware?

In addition to the file i have another log file by same name and 2 other files with pf extension. The exe file appears in the windows explorer window when i open a folder or a removable drive and then dissappers from the window without a trace.Also i have noticed it in the processes list when i press 'ctrl+alt+del'. Also i tried scanning the file with antivirus and did not get any error or warning message. please advice as i have not noticed this before.Is this a normal windows file(I am using XP windows)



I have noticed file called RavMonE.exe in my system folder.Is this a virus/spyware?computer virus



Yes it is a VIRUS.



Discovered: June 23, 2006



Updated: December 22, 2006 02:38:44 PM GMT



Type: Worm



Infection Length: 3,513,806 bytes



Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP



When W32.Rajump is executed, it performs the following actions:



Copies itself as the following file:



%Windir%\RavMonE.exe



Note: %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows (Windows 95/98/Me/XP) or C:\Winnt (Windows NT/2000).



Adds the value:



"RavAV" = "%Windir%\RavMonE.exe"



to the registry subkey:



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\...

No comments:

Post a Comment