Remove RavMon.exe virus without any anti-virus

removing ravmon virus without anti-virus is easy,
but if you want anti virus suggestion or quick and easy way to remove this virus download Trend Micro AntiVirus plus AntiSpyware

virus they can stop your pc from being infected but once you are infected they wont be able to remove it.
I dont know the actual name of this virus nor its effects
Anyways its very easy to remove it
you will have to follow just few simple steps.

  • check if ur infected
  • stop currently running virus
  • delete virus files
  • remove virus to run from startup

so here are the following steps explained
remember until you delete the virus files please open drives using address bar by typing C:\ D:\ X:\ as the virus is activated if you double click the drive
1. Right click any drive on your computer and see if right click menu shows some invalild characters
like this
RavMon.exe virus infected drive

If yes then you are infected.
2. Press Alt+Ctrl+Del to bring up the task manager (or right click taskbar to run it)
stop currently running process of RavMon virus

there will be a program in processes named “SVCHOST.EXE” there will be few svchost in small case but check one in capital letters, if you see more than one “SVCHOST.EXE” (all caps one) end the one with your username infront of it instead of LOCAL SERVICE, NETWORK SERVICE or SYSTEM.
by pressing end process
3. to delete the virus files you need to show system protected files.
for this goto
My Computer->(Menu) Tools-> Folder Options -> (Tab) View -> uncheck “Hide System protected files” -> press OK
If you are unable to unhide the system files you can use 3rd party softwares to browse drive and delete files, try ACDsee or WinRAR
Now open drive (by typing drive letter in address bar)
delete these 2 files

  • Autorun.inf
  • Ravmon.exe

also delete those in all drives (not CD(WR) or DVD(WR) drives) (and remember don’t double click else you will have to start over from top)

Open Windows folder and delete SVCHOST.EXE, SVCHOST.dll and MDM.EXE
Now restart the explorer.exe process by killing it in taskmanager and runing it again [(winkey + R), type "explorer" and hit enter]
cleaned RavMon.exe virus
now right click the drive letter and ull see a clean menu

congrats virus is removed

4. Now remove it from startup (Optional as files are deleted)
Winkey + R type “msconfig” hit enter
remove ravmon virus from windows startup

goto startup tab-> (uncheck) MDM -> OK -> Exit without Restart
How to prevent from this virus in feature
just right click any USB drive (that includes iPod) you have plugged into your PC
if they have currpoted menu the drive is infected
Access drive by typing drive letter and delete files from that drive
Remember you double click the curropted drive you get infected else ur safe
The End

About Hasnat

I R TEH 1337
This entry was posted in Computer. Bookmark the permalink.

111 Responses to Remove RavMon.exe virus without any anti-virus

  1. salman says:

    download autorun.inf virus tools

  2. Muhammad Ashraf says:

    perpose fo flash drive

  3. wajahat says:

    am not actually sure about pop scan support in Symantec but i do know that Symantec anti virus sucks, i have had debate on whats best anti-virus and ended up using none but so far best are AVG and Kaspersky, i recommend AVG if you are having a low gigz processor.
    About the diary FA-127 seems to be an old model of casio.
    and no open source or any software other than casio’s original which doesn’t seems to work fine for you, just check if you are using latest version of software
    FA-127 driver ver 3.0 and FA-127 driver ver 1.5 give those a try
    on the other hand there are various .dbf to .xls and .xls to .dbf converters try googling “xls to dbf“, i hope you get what you are looking for.

  4. JunAid UsmAn says:

    Salam:

    For those who have having problem of not showing Hidden Files.Simply Follow the Following steps to unable the \’Show Hidden Files Options\’ ….

    * Open registry( select run command from start menu and type regedit and then press enter)

    * In the left pane goto path HKEY_LOCAL_MACHINESoftware\\Microsoft \\Windows \\CurrentVersion \\Explorer \\Advanced \\Folder \\Hidden \\SHOWALL

    * Delete the value CheckedValue in the Right pane by right clicking it and selecting delete. (Its type should be REG_SZ and data should be 2.)
    * Create a new DWORD value called CheckedValue by right clicking in the Right pane and then selecting new -> DWORD Value and then changing the name to CheckedValue. (same as above, except that the type is REG_DWORD). Modify the value data to 1 (0×00000001) by right clicking the CheckedValue in the Right pane and selecting modify and changing the value data to 1.

    This should let you change the “Hidden Files and Folders” option.

    HAVE FUN :)

  5. Alex says:

    I found ravmon.exe on my usb stick after visiting a webcafe. This doesn\\\’t bother me at all because I am running Ubuntu Linux, but I find it very difficult to believe that there are still idiots out there who use Windows. My solution for removing this virus is as follows:

    1. – Download Ubuntu from ubuntu.com (or any other linux distribution that suits your needs)
    2. – Wipe your hard drive and install the Linux operating system.
    3. – Enjoy a system that is infinitely more secure and stable than the scam that is MS Windows and has far more software available, easier to install and is as good if not better than what you have to pay for or get illegal cracked versions with windows.

    Alternative solution:

    1. – Get a mac.

    Hope this helps ! Alex.

  6. kabindra says:

    I have problem with hidden files when i checked the radio button on show all hidden files uncheck the superhidden files it automatically checked the radio button on don\\\’t show the hidden file. I already use third party software but it won\\\’t work even i changed there still it don\\\’t show the hidden file.eventhough i have killed all the virus from taskmgr and msconfig the hidden files were not shown.plz help me to show all the hidden files.

  7. shivani says:

    but sir my taskmanager is disabled?

  8. manish kumar says:

    thanks…………this is very usefull……………

  9. RavMond.exe how find and deleat this. also i have genuaine window activation patch.
    pl tell me my freind to how can i solve to deleat this genuaine window activation patch.
    shahidfurqan2003@yahoo.com

  10. dhan says:

    thanks for nice information, it really help me to destroy that virus

  11. tulasi says:

    this command is not a perfectlly to remove virus.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>