RAV0088.exe RAV0088. Dat Manual killing method _ virus killing

Source: Internet
Author: User
Virus name: N/A (Kaspersky)
Virus alias: win32.troj.onlinegamest.cu.65536 [DLL] (poison PA)
Virus size: 9,420 bytes
Adding shell way: Pe_patch Upack
Sample Md5:e14c15ece526b8dea5347b1bdad8afe0
Sample SHA1:31BD81EAF9182E9F87A9C2DF55FA748A8C1CE0AD
Discovery Time: 2007.8
Update Time: 2007.8
Associated virus:
Transmission way: Through the malicious website spread, other Trojan downloads

Technical analysis

The game Trojan, after running to copy itself to the system directory:
and release the DLL injection process:
%system%\rav0088. Dat

To create a startup item:

"RAV0088" = "%system%\rav0088.exe"
Cleanup steps

1. Delete Trojan boot entry (to down.45it.com download icesword120_cn.zip delete):

"RAV0088" = "%system%\rav0088.exe"
2. Restart your computer

3. Delete Trojan file:
%system%\rav0088. Dat

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.