RAVMONE strikes back(i think...hope not)

asdfzhao SG

my lappie has autoplay off for external drives, i thought that it was safe to plug any thumbdrive into my com
but today, i put my friends RECENTLY bought thumbdrive to transfer data and to my horror, AVG popped up with the ravmone warning...i clicked heal.

went to regedit and searched, found ravmone in a couple of places...
HKEY_USERS\S-1-5-21-823695147-1084407886-4264565645-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache

name
F:\Ravmone.exe
G:\ravomone.exe(both external drives, i plugged both thumbdrives into my com... both had ravmone)
Is this normal? Confused
thanks!

another thing... i am sick and tired of protecting my computer from ravmone. can all u ppl pls check ur com (n thumbdrives) n stop spreading it around? Mad

R3SsH|n SG

i recently oso tio...knn!
but no time to really clear up everything... Mad

asdfzhao SG

another victim...hiax... but

dont u ever try 2 put ur thumbdrive in my computer
Laughing

LancerVII SG

i also got tat virus.. while opening my thumbdrive… but nod32 removed for me..

Xtrider SG

i tio also…didn noe it was in my thumb drive… must go control panels and set your settings to show hidden files. then search for ravmon file on the search function. Plug in your thumb drive also. It shld show up if its inside.

ndmmxiaomayi SG

If it's in your registry, it will infect your thumbdrive and pass on to other users.

Delete the key in your registry, and remove the ravmone.exe file.

And please format the thumbdrive.

Before formatting, off auto play in Windows (without your thumbdrive plugged in). This will prevent the virus from running the moment your thumbdrive is plugged in.

http://tinybox.bravehost.com/OffAutoplay.html

After this, format your hard drive.