Removing Ravmon Virus without Anti-Virus is easy.
I don’t know the Actual Name of this virus nor its effects
I don’t know the Actual Name of this virus nor its effects
Anyways its very easy to remove it.
You will have to follow just few simple steps.
•check if your Infected.
•Stop currently running virus.
•Delete virus files.
•Remove virus to run from startup.
So here are the following steps explained:
Remember until you delete the virus files please open drives using address bar by typingC:\ D:\ X:\ as the virus is activated if you double click the drive
Step 1: Right click any drive on your computer and see if right click menu shows some
invalild characters
like this:
Step 2:
Press Alt+Ctrl+Del to bring up the task manager (or right click taskbar to run it) there
will be a program in processes named “SVCHOST.EXE” there will be few svchost in
small case but check one in capital letters, if you see more than one “SVCHOST.EXE”
(all caps one) end the one with your username infront of it instead of LOCAL SERVICE,
NETWORK SERVICE or SYSTEM(by pressing end process).
Step 3:
To delete the virus files you need to show system protected files.
For this goto
My Computer->(Menu) Tools-> Folder Options -> (Tab) View -> uncheck “Hide System
protected files” -> press OK
If you are unable to unhide the system files you can use 3rd party softwares to browse
drive and delete files, tryACDsee orWi n R A R
Now open drive (by typing drive letter in address bar)
Delete these 2 files
•Autorun.inf
•Ravmon.exe
Also delete those in all drives (not CD(WR) or DVD(WR) drives) (and rememberdon’t
double click else you will have to start over from top) Open Windows folder and delete
SVCHOST.EXE,.dlland SVCHOST MDM.EXE
Now restart theexplor er.ex e process by killing it in taskmanager and runing it again
[(winkey + R), type “explorer” and hit enter ]
Now right click the drive letter and you will see a clean menu congrats virus is removed
Step 4:
Now remove it from startup (Optional as files are deleted)
Winkey + R type “msconfig” hit enter
How to prevent from this virus in feature
just right click any USB drive (that includes iPod) you have plugged into your PC
if they have currpoted menu the drive is Infected.
Access drive by typing Drive letter and Delete files from that drive
Remember you double click the curropted drive you get infected else you are safe