RavMonE virus

The RavMonE virus, also known as W32/Rjump, is a virus that opens a back door on a computer running Windows, creates a copy of itself in the Windows system directory and creates a log file containing the port number on which its back door component listens. When a computer becomes infected, the virus allows hackers to gain access to its files and programs.

W32/Rjump can spread on the Internet through e-mail attachments. It can also be transmitted through portable devices such as flash memory, external storage media, digital cameras and multimedia players. Such devices, even if they do not themselves run Windows, can acquire the virus from Windows-based computers and transmit it to other Windows-based computers. In mid-October 2006, Apple reported that a number of video iPods had shipped from a contract manufacturer with RavMonE already installed.

Most antivirus software, if kept up-to-date and run regularly, can detect and remove W32/Rjump before it can cause any harm.

Read more about RavMonE virus: - On SearchSecurity.com, Bill Brenner discusses contaminated iPods in the workplace. - McAfee describes the technical aspects of W32/Rjump and provides countermeasures. - The RavMonE virus mysteriously turned up on a few video iPods that were shipped in September 2006.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

BROWSE BY TAG Malware, Viruses, Trojans and Spyware,   Information Security Threats,   VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT How to defend against rogue DHCP server malware Rogue DHCP server malware is a new twist on an old concept. The good news is that defenses exist; the bad news is that many organizations haven't... New Trojan stealing FTP credentials, attacking FTP websites A new Trojan has collected up to 80,000 unique FTP server logins and is injecting malicious code into thousands of FTP websites. Cybercriminals exploit Michael Jackson, Farrah Fawcett deaths Security researchers report malicious spam, poisoned search engine results just hours after the deaths of pop star Michael Jackson and actress Farrah...

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary bot worm  (SearchSecurity.com) A bot worm is a self-replicating malware program that resides in current memory, turns infected computers into zombies (or bots) and transmits itself... directory traversal  (SearchSecurity.com) Directory traversal is a form of HTTP exploit in which a hacker uses the software on a Web server to access data in a directory other than the...