473,797 Members | 2,970 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Pen drive - Virus

subashini Thiyagarajan
218 New Member
I got a very good pendrive. Without knowing me my pen drive was spreading virus

ravon.exe file is running as soon as i plug my pendrive in any system. Then it started giving nose from floppy drive. How i can clear my pen drive virus?

One more thing now that virus has subsided in my system, it has made my system slow. What i should do to make it faster as earlier?
May 12 '07
26 20349
oohope
2 New Member
This happens due to a virus. This blog shows you how to neutralize and remove this type of viruses from your system manually. Even many antivirus software’s are not very effective in doing that.
www.neo-code.blogspot.c om
www.neo-code.blogspot.c om
I can't open it.
Oct 27 '07 #11
bartonc
6,596 Recognized Expert Expert
www.neo-code.blogspot.c om
I can't open it.
I've checked this link. It work in Firefox.
Oct 27 '07 #12
oohope
2 New Member
I've checked this link. It work in Firefox.
I've checked this link in Firefox too.I can't open too.
Could you send a E-mail to me about how can clean ravon.exe virus .
Thankz!
Oct 28 '07 #13
narin2007
10 New Member
Apart from the option given by all. The best way to do restart your system in safe mode. and reformat your pen drive. in case if you don't get antivirus fror taht virus.
Oct 31 '07 #14
writam
3 New Member
Hi all,

When I am putting any downloaded DVD RIP file into my pen drive after some time this file is going to be corrupted.but scanning with Symantec antivirus pen drive does not show any virus in it.

Please solve this problem.

Writam.
Mar 7 '08 #15
AmberJain
884 Recognized Expert Contributor
A bit of searching would have helped

LINK
_______________ _______________ _______________ _______________ _____
HOPE THIS HELPS.......... ........
Mar 8 '08 #16
pankaj3776
1 New Member
Ravmon.exe is a virus comes from Pen Drive & copy itself in all hard disk partitions with autorun.inf file. When we double click on a drive to open it, this reads autorun.inf file & run the Ravmon.exe virus. To remove this virus you should have a strong Antivirus software. You need not to completely scan your system. Just search for Ravmon.exe in Windows Search and select all the displayed result and right click to choose your antivirus software to scan and remove from your system. Now search for autorun.inf file that comes with Ravmon.exe. This time select only autorun.inf files attached to your drive i.e. C:\autorun.inf, D:\autorun.inf, E:\autorun.inf, F:\autorun.inf and delete. Now your system is free from Ravmon.exe virus. But before using your infected Pen Drive, you have to take some steps to stop Pen Drive Viruses in future.

Copy the following text from "Windows Registry Editor Version 5.00" and paste it to Notepad and save the file with .reg extention and double click the file and select yes option to register.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_US ER\Software\Mic rosoft\Windows\ CurrentVersion\ Policies\Explor er]
"NoDriveTypeAut oRun"=dword:000 00085

[HKEY_LOCAL_MACH INE\SOFTWARE\Mi crosoft\Windows \CurrentVersion \Explorer\Autop layHandlers\Can celAutoplay\Fil es]
"*setup*.exe"=" "
"*instal*.exe"= ""
"*setup*.bat"=" "
"*instal*.bat"= ""
"*setup*.cmd"=" "
"*instal*.cmd"= ""
"*setup*.com"=" "
"*instal*.com"= ""
"Y?kle*"=""
"Felrak.exe "=""
"Imposta.exe"=" "
"KUR.exe"=" "
"Ayarla.exe "=""
"sfc2.ico"= ""
"evanims"=" "
"00000001.tmp"= ""
"updmoney.exe"= ""
"hs\\media\\y\\ 11399\\11399_cd _fp.jpg"=""
"hs\\media\\y\\ 9953\\9953_cd_f p.jpg"=""
"hs\\media\\y\\ 9951\\9951_cd_f p.jpg"=""
"hs\\media\\y\\ 9964\\9964_cd_f p.jpg"=""
"hs\\media\\y\\ 9968\\9968_cd_f p.jpg"=""
"Ravmon.exe "=""
"VirusRemoval.v bs"=""
"sxs.exe"=" "
"winfile.exe"=" "
"run.wsh"=" "
"ylr.exe"=" "
"powerpoint.exe "=""
"newfolder.exe" =""

[HKEY_CURRENT_US ER\Software\Mic rosoft\Windows\ CurrentVersion\ Policies\Explor er]
"DisallowRun"=d word:00000001

[HKEY_CURRENT_US ER\Software\Mic rosoft\Windows\ CurrentVersion\ Policies\Explor er\DisallowRun]
"1"="ravmon.exe "
"2"="sxs.ex e"
"3"="winfile.ex e"
"4"="run.ws h"
"5"="VirusRemov al.vbs"
"6"="ylr.ex e"
"7"="powerpoint .exe"
"8"="newfolder. exe"

copy end before this

Reboot the system. Now insert your Pen Drive and format it.
Mar 20 '08 #17
nileshwa
1 New Member
Hi

Did you find the solution for this

Regards

Nilesh

hi friends,

i got a very good pendrive bit costlier also.Jogr

without knowing me my pen drive was spreading virus

ravon.exe file is running as soon as i plug my pendrive in any system.then it started giving nose from floppy drive....

any one faced this problem....plea se tell me

how i can clear my pen drive virus???i am not using it now.

Any best suggestions appericiated... ..

one more thing now that virus has subsided in my system,,,,,but my system is very slow now

what i should do to make it faster as earlier???????? ???????????????
Mar 23 '08 #18
PC Doctor
1 New Member
This happens due to a virus/worm. This page will show how to remove it

http://www.freepcclinic.com/flash_drive_virus.html

Regards
PC Doctor
Aug 8 '08 #19
AJAY321
1 New Member
In my pendrive, a virus named, " New Folder.exe is shown. On deleting it is not removed. On deleting it goes, but immediately copied. On opening the folder (New Folder.exe), it shows all the files in " My document" folder of my computer. I tried to remove the virus file with Adaware, trend micro, but no fruitful use. Pl Guide.
Oct 10 '08 #20

Sign in to post your reply or Sign up for a free account.

Similar topics

1
3685
by: | last post by:
My ASP.NET application needs read/write permissions for drive "Z:", which is mapped to my Linksys Gigadrive (Network Attached Storage...if anyone is familiar with that). If I configure the Gigadrive with "Guest" access rights, then everything works fine, BUT this leaves the drive vulnerable to everyone/everything including network viruses. Lately, my drive has had several attacks by the Lovegate virus. Eliminating such attacks requires...
12
1621
by: Charles Law | last post by:
This is a bit of a vague question, but I am just starting on this, and wonder if anyone has ideas of where to start. I have a program that controls some external equipment. It sends messages in various flavours to cause the equipment to turn signals on and off, and change voltages and such like. Attached to this external equipment, is another piece of equipment that responds to these changes in signals and voltages.
4
3592
by: cmrchs | last post by:
Hi, executing the following on a local drive works fine : FileStream wLog; wLog=File.OpenRead(@"d:\Log.txt"); but executing the same code on a network drive creates a FileIOPermission-exception. although the user has full control on the drive where the application is running. Actually, any IO-statement creates an exception ???
3
10587
by: James N | last post by:
My ASP.NET application needs read/write permissions for drive "Z:", which is mapped to my Linksys Gigadrive (Network Attached Storage...if anyone is familiar with that). If I configure the Gigadrive with "Guest" access rights, then everything works fine, BUT this leaves the drive vulnerable to everyone/everything including network viruses. Lately, my drive has had several attacks by the Lovegate virus. Eliminating such attacks...
16
9536
by: Otie | last post by:
Hi, Is there a way for VB5 to determine exactly where on a hard drive a .exe file is stored upon the .exe file's first copying to the hard drive? What I need to know is the exact hard drive sector, cluster, partition, etc. information so I can use it later on to determine if the file was ever deleted and restored or moved elsewhere. Thank you.
0
1281
by: Satya | last post by:
I am trying to load a Html into a HTML Docuemt Object in my client widow. Everything works fine if i used a mapped drive. But the application breaks if i use the UNC directly. Looks like when the document is accessed through UNC it take a while to load it and probably gets timed out. Does anybody have a clue about this issue. Some said that disabling the NORTON ANtI Virus Auto protect will help it. But went in vain.
12
3023
Loismustdie129
by: Loismustdie129 | last post by:
I was wondering if there is any way I can completely take everything off your Hard Drive. I need to take everything off my Hard Drive because of a virus on it that will not get off no matter what I do. So any thoughts?
3
1992
by: SRSRAJA | last post by:
respected sir; i have a doubt about computer viruses,that is; for eg consider: my system has a lot of viruses. the doubt is ,if i insert a disk or a pen drive which has full of details, that is it has no empty space ,then it wil also be affected by the virus.how it is possible. i studied in a book that a virus is a self replicating proigram,it occupies some space or thefts some memory.if the disk has no space then how the disk or...
4
3291
by: writam | last post by:
Hi all, I am facing a problem in my pen drive.When i am putting any DVD RIP file in my pen drive the file has corrupted after some time.But scanning with Symantac antivirus pen drive has not shown any virus in it. Please help. Writam.
0
9685
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
10468
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
10205
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9063
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7559
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6802
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5582
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
3748
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
2933
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.