下面是引用notangry於2005-09-6 03:11發表的 :
Symantec 稱之為 Backdoor.Graybird.C，可以參考 http://securityresponse.symantec.com/avcen...oor.graybird.c.html 但是似乎又不太符合大大的描述。

引用http://securityresponse.symantec.com/avce...door.graybird.html內之片段
When Backdoor.Graybird runs, it performs the following actions:
Copies itself as one of the following filenames:
%System%\ravmond.exe