下面是引用notangry于2005-09-6 03:11发表的 :
Symantec 称之为 Backdoor.Graybird.C，可以参考 http://securityresponse.symantec.com/avcen...oor.graybird.c.html 但是似乎又不太符合大大的描述。

引用http://securityresponse.symantec.com/avce...door.graybird.html内之片段
When Backdoor.Graybird runs, it performs the following actions:
Copies itself as one of the following filenames:
%System%\ravmond.exe