473,320 Members | 1,926 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Pen drive - Virus

subashini Thiyagarajan
I got a very good pendrive. Without knowing me my pen drive was spreading virus

ravon.exe file is running as soon as i plug my pendrive in any system. Then it started giving nose from floppy drive. How i can clear my pen drive virus?

One more thing now that virus has subsided in my system, it has made my system slow. What i should do to make it faster as earlier?
May 12 '07 #1
26 20269
hi friends,

i got a very good pendrive bit costlier also.Jogr

without knowing me my pen drive was spreading virus

ravon.exe file is running as soon as i plug my pendrive in any system.then it started giving nose from floppy drive....

any one faced this problem....please tell me

how i can clear my pen drive virus???i am not using it now.

Any best suggestions appericiated.....

one more thing now that virus has subsided in my system,,,,,but my system is very slow now
i have ravon.exe virus how can i clean it ?
May 18 '07 #2
i have ravon.exe
how can i clean it ?
May 18 '07 #3
permenant:
Go to the registry and delete it.

for temperarory :

go to task manager and kill the task
May 19 '07 #4
Motoma
3,237 Expert 2GB
Download one of the free Antivirus software suites, boot into safe mode, run the AV on your thumbdrive and computer.
May 21 '07 #5
hi my pen drive having some different virus named microsoft power point .exe,then autorun ,one setup file ,
Jul 2 '07 #6
Motoma
3,237 Expert 2GB
hi my pen drive having some different virus named microsoft power point .exe,then autorun ,one setup file ,
Format the thumbdrive.
Jul 2 '07 #7
bartonc
6,596 Expert 4TB
This happens due to a virus. This blog shows you how to neutralize and remove this type of viruses from your system manually. Even many antivirus software’s are not very effective in doing that.
www.neo-code.blogspot.com
Thank you. Your link has been found to be more than acceptable, it is very helpful.
Sep 2 '07 #8
oddjob
7
"First fix" for flash drive infections .....
Flash_Disinfector.exe [EDIT: URL Removed]


OJ
Sep 8 '07 #9
I have My Own Blocker
if you wanna it request from - email_removed@foryourownprotection.com
( Easy as ABC )
Oct 24 '07 #10
oohope
2
This happens due to a virus. This blog shows you how to neutralize and remove this type of viruses from your system manually. Even many antivirus software’s are not very effective in doing that.
www.neo-code.blogspot.com
www.neo-code.blogspot.com
I can't open it.
Oct 27 '07 #11
bartonc
6,596 Expert 4TB
www.neo-code.blogspot.com
I can't open it.
I've checked this link. It work in Firefox.
Oct 27 '07 #12
oohope
2
I've checked this link. It work in Firefox.
I've checked this link in Firefox too.I can't open too.
Could you send a E-mail to me about how can clean ravon.exe virus .
Thankz!
Oct 28 '07 #13
Apart from the option given by all. The best way to do restart your system in safe mode. and reformat your pen drive. in case if you don't get antivirus fror taht virus.
Oct 31 '07 #14
writam
3
Hi all,

When I am putting any downloaded DVD RIP file into my pen drive after some time this file is going to be corrupted.but scanning with Symantec antivirus pen drive does not show any virus in it.

Please solve this problem.

Writam.
Mar 7 '08 #15
AmberJain
884 Expert 512MB
A bit of searching would have helped

LINK
__________________________________________________ _______________
HOPE THIS HELPS..................
Mar 8 '08 #16
Ravmon.exe is a virus comes from Pen Drive & copy itself in all hard disk partitions with autorun.inf file. When we double click on a drive to open it, this reads autorun.inf file & run the Ravmon.exe virus. To remove this virus you should have a strong Antivirus software. You need not to completely scan your system. Just search for Ravmon.exe in Windows Search and select all the displayed result and right click to choose your antivirus software to scan and remove from your system. Now search for autorun.inf file that comes with Ravmon.exe. This time select only autorun.inf files attached to your drive i.e. C:\autorun.inf, D:\autorun.inf, E:\autorun.inf, F:\autorun.inf and delete. Now your system is free from Ravmon.exe virus. But before using your infected Pen Drive, you have to take some steps to stop Pen Drive Viruses in future.

Copy the following text from "Windows Registry Editor Version 5.00" and paste it to Notepad and save the file with .reg extention and double click the file and select yes option to register.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:00000085

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\AutoplayHandlers\CancelAutopla y\Files]
"*setup*.exe"=""
"*instal*.exe"=""
"*setup*.bat"=""
"*instal*.bat"=""
"*setup*.cmd"=""
"*instal*.cmd"=""
"*setup*.com"=""
"*instal*.com"=""
"Y?kle*"=""
"Felrak.exe"=""
"Imposta.exe"=""
"KUR.exe"=""
"Ayarla.exe"=""
"sfc2.ico"=""
"evanims"=""
"00000001.tmp"=""
"updmoney.exe"=""
"hs\\media\\y\\11399\\11399_cd_fp.jpg"=""
"hs\\media\\y\\9953\\9953_cd_fp.jpg"=""
"hs\\media\\y\\9951\\9951_cd_fp.jpg"=""
"hs\\media\\y\\9964\\9964_cd_fp.jpg"=""
"hs\\media\\y\\9968\\9968_cd_fp.jpg"=""
"Ravmon.exe"=""
"VirusRemoval.vbs"=""
"sxs.exe"=""
"winfile.exe"=""
"run.wsh"=""
"ylr.exe"=""
"powerpoint.exe"=""
"newfolder.exe"=""

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"DisallowRun"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\DisallowRun]
"1"="ravmon.exe"
"2"="sxs.exe"
"3"="winfile.exe"
"4"="run.wsh"
"5"="VirusRemoval.vbs"
"6"="ylr.exe"
"7"="powerpoint.exe"
"8"="newfolder.exe"

copy end before this

Reboot the system. Now insert your Pen Drive and format it.
Mar 20 '08 #17
Hi

Did you find the solution for this

Regards

Nilesh

hi friends,

i got a very good pendrive bit costlier also.Jogr

without knowing me my pen drive was spreading virus

ravon.exe file is running as soon as i plug my pendrive in any system.then it started giving nose from floppy drive....

any one faced this problem....please tell me

how i can clear my pen drive virus???i am not using it now.

Any best suggestions appericiated.....

one more thing now that virus has subsided in my system,,,,,but my system is very slow now

what i should do to make it faster as earlier???????????????????????
Mar 23 '08 #18
This happens due to a virus/worm. This page will show how to remove it

http://www.freepcclinic.com/flash_drive_virus.html

Regards
PC Doctor
Aug 8 '08 #19
In my pendrive, a virus named, " New Folder.exe is shown. On deleting it is not removed. On deleting it goes, but immediately copied. On opening the folder (New Folder.exe), it shows all the files in " My document" folder of my computer. I tried to remove the virus file with Adaware, trend micro, but no fruitful use. Pl Guide.
Oct 10 '08 #20
AmberJain
884 Expert 512MB
Hello,

Download Unlocker and install it. Open your pendrive and right click [New folder.exe] to see if there are some locking handles found. If locking handles are found select "kill process" option for all locking handles. Then under Actions menu, try choosing option "delete". That may or may not help depending upon the exact nature of virus. See image below for more help:




If this deosnot helps, you will need booting into FreeDOS or Linux to delete [New Folder.exe].

If unlocker doesnot helps, tell me......then we will try from Freedos or Linux.


H0pe th!s helps............
AmbrNewlearner
Oct 10 '08 #21
Hai guys !
i made an application called Pendrive VIRUSKILLER.
You can download it from my site

http://cleanpendrive.webnode.com/

it will deletes fun.exe ,newfolder.exe ,documents.exe,ravmon.exe,autorun.ini 7 more than 20 viruses.
Feb 5 '09 #22
Nepomuk
3,112 Expert 2GB
Will that actually clean the files or just delete them? Because if it just deletes them, you'd better use a standard anti-virus program (which can remove much more than 20 viruses). And sometimes files like autorun.ini can be quite useful.

Greetings,
Nepomuk
Feb 5 '09 #23
Hi,

You can protect your pen drive from autorun type viruses by creating a folder named autorun.inf in the root folder. You can find more detailed instructions at Solo Antivirus site link
http://srnmicro.com/customers/techfaq.htm#TF1

Best Regards
Palival


@subashini Thiyagarajan
Jun 15 '09 #24
You can find pen drive virus details and protection methods at Solo Antivirus site link http://srnmicro.com/customers/techfaq.htm#TF1
Jun 15 '09 #25
Nepomuk
3,112 Expert 2GB
@palival
Nice trick, I'll have to remember that one! :-) Of course, it should be read-only.

Greetings,
Nepomuk
Jun 15 '09 #26
Hello You Asked: Hi all,

When I am putting any downloaded DVD RIP file into my pen drive after some time this file is going to be corrupted.but scanning with Symantec antivirus pen drive does not show any virus in it.

Please solve this problem.

Writam.


Answer: When You Put A File This Large On A Flash Drive Your Computer Will CACHE (Hold) A Large Amount Of Data In The Memory That Should Go To The Pen Drive To Prevent Corupting Any File Always Select Safely Remove Hardware And Select Your Removable Media Follow This Link

http://www.computing.net/answers/win...re/155251.html


PS: Read The Whole Thing
Mar 15 '10 #27

Sign in to post your reply or Sign up for a free account.

Similar topics

1
by: | last post by:
My ASP.NET application needs read/write permissions for drive "Z:", which is mapped to my Linksys Gigadrive (Network Attached Storage...if anyone is familiar with that). If I configure the...
12
by: Charles Law | last post by:
This is a bit of a vague question, but I am just starting on this, and wonder if anyone has ideas of where to start. I have a program that controls some external equipment. It sends messages in...
4
by: cmrchs | last post by:
Hi, executing the following on a local drive works fine : FileStream wLog; wLog=File.OpenRead(@"d:\Log.txt"); but executing the same code on a network drive creates a...
3
by: James N | last post by:
My ASP.NET application needs read/write permissions for drive "Z:", which is mapped to my Linksys Gigadrive (Network Attached Storage...if anyone is familiar with that). If I configure the...
16
by: Otie | last post by:
Hi, Is there a way for VB5 to determine exactly where on a hard drive a .exe file is stored upon the .exe file's first copying to the hard drive? What I need to know is the exact hard drive...
0
by: Satya | last post by:
I am trying to load a Html into a HTML Docuemt Object in my client widow. Everything works fine if i used a mapped drive. But the application breaks if i use the UNC directly. Looks like when the...
12
Loismustdie129
by: Loismustdie129 | last post by:
I was wondering if there is any way I can completely take everything off your Hard Drive. I need to take everything off my Hard Drive because of a virus on it that will not get off no matter what I...
3
by: SRSRAJA | last post by:
respected sir; i have a doubt about computer viruses,that is; for eg consider: my system has a lot of viruses. the doubt is ,if i insert a disk or a pen drive which has full of details, that...
4
by: writam | last post by:
Hi all, I am facing a problem in my pen drive.When i am putting any DVD RIP file in my pen drive the file has corrupted after some time.But scanning with Symantac antivirus pen drive has not shown...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
0
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.