Guys here is what i do to remove the ever annoying Ravmon and other viruses ..these viruses frequently creep in when u plug ur USB in to an infected PC. Not only they dont let u open your drives with left click and also display weird ASCII characters when you are click a drive
1. In the Runbox Type cmd
2. Then go to the Drive where virus is e.g F:
3. type F:\Dir/AH
4. A list of Hidden Files would be displayed
Now Remove Files like Autorun.inf, Ravmon.exe and the like by following command
5. Erase/a/f Autorun.inf
6. Unplug ur USB and replug it and it will open normally
Other method you can uses is…
1. Appropriate bang any drive on your computer and see if appropriate bang card shows some invalild characters If yes afresh you are infected.
2. Press Alt+Ctrl+Del to accompany up the assignment administrator (or appropriate bang taskbar to run it) there will be a affairs in processes called “SVCHOST.EXE” there will be few svchost in baby case but analysis one in basic letters, if you see added than one “SVCHOST.EXE” (all caps one) end the one with your username infront of it instead of LOCAL SERVICE, NETWORK SERVICE or SYSTEM.by acute end process
3. To delete the virus files you charge to appearance arrangement adequate files. for this goto
My Computer->(Menu) Tools-> Folder Options -> (Tab) View -> uncheck “Hide System protected files” -> press OK
If you are clumsy to unhide the arrangement files you can use 3rd affair softwares to browse drive and delete files, try ACDsee or WinRAR. Now accessible drive (by accounting drive letter in abode bar) delete these 2 files
* Ravmon.exe
* Autorun.inf
also delete those in all drives (not CD(WR) or DVD(WR) drives) (and bethink don’t bifold bang abroad you will accept to alpha over from top). Accessible Windows binder and delete SVCHOST.EXE, SVCHOST.dll and MDM.EXE. Now restart the explorer.exe action by killing it in taskmanager and runing it afresh [(winkey + R), blazon “explorer” and hit enter] now appropriate bang the drive letter and ull see a apple-pie card congrats virus is removed
4. Now abolish it from startup (Optional as files are deleted)
Winkey + R type “msconfig” hit enter
goto startup tab-> (uncheck) MDM -> OK -> Exit without Restart
How to anticipate from this virus in affection just appropriate bang any USB drive (that includes iPod) you accept acquainted into your PC if they accept currpoted card the drive is infected
Access drive by accounting drive letter and delete files from that drive Bethink you bifold bang the curropted drive you get adulterated abroad ur safe
