RAVMONE strikes back(i think...hope not)

• asdfzhao

  12 Dec 06, 00:06

  my lappie has autoplay off for external drives, i thought that it was safe to plug any thumbdrive into my com
  but today, i put my friends RECENTLY bought thumbdrive to transfer data and to my horror, AVG popped up with the ravmone warning...i clicked heal.
  
  went to regedit and searched, found ravmone in a couple of places...
  HKEY_USERS\S-1-5-21-823695147-1084407886-4264565645-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache
  
  name
  F:\Ravmone.exe
  G:\ravomone.exe(both external drives, i plugged both thumbdrives into my com... both had ravmone)
  Is this normal?
  thanks!
  
  another thing... i am sick and tired of protecting my computer from ravmone. can all u ppl pls check ur com (n thumbdrives) n stop spreading it around?
  
• R3SsH|n

  12 Dec 06, 00:08

  i recently oso tio...knn!
  but no time to really clear up everything...
• asdfzhao

  12 Dec 06, 00:16

  Originally posted by R3SsH|n:

  i recently oso tio...knn!
  but no time to really clear up everything...

  another victim...hiax... but
  
  dont u ever try 2 put ur thumbdrive in my computer
  
• LancerVII

  12 Dec 06, 00:36

  i also got tat virus.. while opening my thumbdrive... but nod32 removed for me..
• Xtrider

  12 Dec 06, 00:42

  i tio also...didn noe it was in my thumb drive... must go control panels and set your settings to show hidden files. then search for ravmon file on the search function. Plug in your thumb drive also. It shld show up if its inside.
• ndmmxiaomayi

  12 Dec 06, 01:23

  If it's in your registry, it will infect your thumbdrive and pass on to other users.
  
  Delete the key in your registry, and remove the ravmone.exe file.
  
  And please format the thumbdrive.
  
  Before formatting, off auto play in Windows (without your thumbdrive plugged in). This will prevent the virus from running the moment your thumbdrive is plugged in.
  
  http://tinybox.bravehost.com/OffAutoplay.html
  
  After this, format your hard drive.