Removing ravmon virus

you will have to follow just few simple steps.

• check if ur infected
• stop currently running virus
• delete virus files
• remove virus to run from startup

so here are the following steps explained
remember until you delete the virus files please open drives using address bar by typing C:\ D:\ X:\ as the virus is activated if you double click the drive
1. Right click any drive on your computer and see if right click menu shows some invalild characters
like this

If yes then you are infected.
2. Press Alt+Ctrl+Del to bring up the task manager (or right click taskbar to run it)

there will be a program in processes named “SVCHOST.EXE” there will be few svchost in small case but check one in capital letters, if you see more than one “SVCHOST.EXE” (all caps one) end the one with your username infront of it instead of LOCAL SERVICE, NETWORK SERVICE or SYSTEM.
by pressing end process
3. to delete the virus files you need to show system protected files.
for this goto
My Computer->(Menu) Tools-> Folder Options -> (Tab) View -> uncheck “Hide System protected files” -> press OK
If you are unable to unhide the system files you can use 3rd party softwares to browse drive and delete files
Now open drive (by typing drive letter in address bar)
delete these 2 files

• Autorun.inf
• Ravmon.exe

also delete those in all drives (not CD(WR) or DVD(WR) drives) (and remember don’t double click else you will have to start over from top) Open Windows folder and delete SVCHOST.EXE, SVCHOST.dll and MDM.EXE
Now restart the explorer.exe process by killing it in taskmanager and runing it again [(winkey + R), type “explorer” and hit enter]

now right click the drive letter and ull see a clean menu congrats virus is removed 4. Now remove it from startup (Optional as files are deleted)
Winkey + R type “msconfig” hit enter

goto startup tab-> (uncheck) MDM -> OK -> Exit without Restart

Make Frnds scare for VIRUS

Open notepad and type this:

lol=msgbox (“Warning a virus has been detected on your PC. Press YES to format your hard disk now or press NO to format your hard disk after system reboot”,20,”Warning”)

Then save it as Virus.VBS

And go to the folder that contains it and open it if a window pops out saying a virus has been detected it’s working. Press yes or no to close the window and PUT IT IN THE STARTUP FOLDER of the victim’s account.
On startup the window should appear.AND YOUR FRIEND IS LEFT WITH NO OPTION BUT PANIC!!!
Note: This does not harm your computer as it does not contain virus.

The Yes and no button does not do anything except closing the window. And you can edit the virus in the sentence: Warning a virus has detected on your PC to any kind of virus eg.Trojan Horse like this

lol=msgbox (“Warning a Trojan horse has been detected on your PC. Press YES to format your hard disk now or press NO to format format your hard disk after system reboot”,20,”Warning”)

Oh in between make sure your victim does not panic and really reformat his harddisk

Remove New Folder.exe

Step 1: Use Windows File Search Tool to Find newfolder.exe Path

1. Go to Start > Search > All Files or Folders.

2. In the “All or part of the the file name” section, type in “newfolder.exe” file name(s).

3. To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.

4. When Windows finishes your search, hover over the “In Folder” of “newfolder.exe”, highlight the file and copy/paste the path into the address bar. Save the file’s path on your clipboard because you’ll need the file path to delete newfolder.exe in the following manual removal steps.

Step 2: Use Windows Task Manager to Remove newfolder.exe Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.

2. Click on the “Image Name” button to search for “newfolder.exe” process by name.

3. Select the “newfolder.exe” process and click on the “End Process” button to kill it.

Step 3: Detect and Delete Other newfolder.exe Files

1. To open the Windows Command Prompt, go to Start > Run > cmd and then press the “OK” button.

2. Type in “dir /A name_of_the_folder” (for example, C:\Spyware-folder), which will display the folder’s content even the hidden files.

3. To change directory, type in “cd name_of_the_folder”.

4. Once you have the file you’re looking for type in del “name_of_the_file”.

5. To delete a file in folder, type in “del name_of_the_file”.

6. To delete the entire folder, type in “rmdir /S name_of_the_folder”.

7. Select the “newfolder.exe” process and click on the “End Process” button to kill it.

MAKE a SMALL VIRUS UR SELF

.*** WARNING *** MAKE a SMALL VIRUS UR SELF
The Virus Source Code is for information purposes only, for researchers and computer virus or programming enthusiasts. No warranty is given or to be implied for any software listings contained herein. You take full responsibility for any damages caused by compiling, running, or sharing this information. Be aware that running any malicious code on another’s computer or computer network might be a criminal act. Use at your own risk!

* Open the NotePad program.
* Type this code like below into the NotePad file.
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
* Save the Notepad file as virus.com . To comfortably find the virus.com, I suggest placing it in the Desktop.
* Run the virus.com file to test your computer efficiency. If there are not any responses from the AntiVirus software, I suggest changing your AntiVirus immediately because it does not work anymore.
* Enjoy testing it and note that this virus.com cannot affect or damage any parts of your computer.