What are the symptoms that shows your computer have been affected by RavMon or RavMon.exe ::.
1) You will see some invalid character like some Chinese scripts when you right click on your drive.
2) Your show hidden files and folders not working
3) Your command prompt been disabled
4) Registry Editor been disabled
5) Task manager been disabled
What you should do to remove this virus ::.
It exactly the same way with the solution to remove VirusMawar and the only different is the file name ::.
1) Go to Run then type cmd
2) Paste this line in command window
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
3) Again, go to Run type regedit
4) In Registry editor find keyword "disabletaskmgr" then modify it to 0
5) Open your Task Manager and stop all process with name "RavMon.exe"
6) Search for keyword "nofolderoption" then modify it to 0
7) You also may found keyword "NoFind" there, do same thing as before, modify it to 0
8) Open your Folder Option and in View tab, check for show hidden files and uncheck hide operating system files
9) Now you can delete the virus with name "RavMon.exe" which located in location such as "C:\WINDOWS\system32" , and all drive in your computer.
10) You also need to delete files named "Autorun.inf" in every drive and removable drive that have been connected with your PC before.
11) Lastly restart your computer and remember to restore back your Folder Option to previous setting.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment