W32.RIBDEW D

[MikeS]

My neighbor received an alert from his antivirus software
stating "w32.ribdew d" has been detected and quarantined.

Infection Name: "W32.RIBDEW D"
Infected File: "pxwma.dll"
Location: "C:\WINDOWS"

Based upon our search results many others are also
searching for information on what appears to be
variations of this infection.

Strangely, none of the antivirus companies have any
information regarding an infection by this name.


Anyone ever hear of "W32.RIBDEW D"?

 

[Dave M]

Well, hadn't hear of it till t'nite... but it's not unknown. Here are some
references to get you started
http://castlecops.com/tk1907-pxwma_dll.html
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453094206

Maybe somebody will have more info tomorrow... assuming your neighbor
doesn't use MSAS with it's BHO and other realtime protections, although I
have no idea if MSAS can eliminate this one or even detect it... Would be
interesting to find out though.