PC Security Shield Virus Alert: I-Worm.Win32.Ratos.27136
  • Also Known As
    		•    
  • Type
    		•  Trojan Horse  
  • Systems Affected
    		•  Win32 
  • Resident in System Memory
    		•  No
  • Origin
    		•  others
  • Encryption
    		•  No
  • Discovered on
    		•  08/16/2007
  • How it spread
    		•  Email
  • Infection symptoms
    		•  Sends email, Creates file
  • Specific date of infections
    		•   None
  • Destructivity/ Distribution Potential
    		•  ** / ***
  • ViRobot version able to detect/repair
    		•  Able to detect/repair
    [ViRobot version: 08/16/2007]  

    Technical Description

    Summary

    Tihs worm spreads via email and it is rapidly spreading. It was found on Aug. 16, 2007.
    Upon execution the copies of worm,"rasor38a.dll" is created in window folder and "winpsd.exe" is created in Window system folder.

    It retrieves email addresses from the infected system and spreads by sending email with attaching worm as subjected "Photos'.

    The details are now analyzing, so the detected name I-Worm.Win32.Ratos.27136 can be changed.

    How it spreads

    Worm spreads via email with its own SMTP engine and the spreading via email spreads by retrieving email addresses from ifected system.




    How to repair:       [Repair by using The Shield AntiVirus 2008]


    The Shield Pro AntiVirus & Firewall 2007


    The Shield 2008 PRO Anti Virus