I followed the instuctions and deleted adober.exe from c:windows and ravman.log from reg, scaned system and my usb disk and now it seems ok, but when i click to usbhdd icon win opens "open with/choose the program...." window. ofcouce if i choose explorer it works but every time i need to do it. what should i do?
thx
jah
I had this same problem. Here's the deal. The worm added some entries to the registry which then changed the context menus (which is what you get when you right click) for all mounted drives (including removable disks). It changes the default from
Open to
Auto. So here is what you need to do:
1. Open regedit.
2. Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2
***Back this up before making changes***
Option A
3. Search the various keys for a sub key with Shell (capitalize)
4. Then search the subkeys under ones containing Auto
5. If any of the Auto subkeys contain subkeys named command click on them and see if "adober.exe" or "ravmonlog" are referenced.
6. If so, delete the entire key.
Option B
3. Go to Edit-Find...
4. Search only in keys and for the string "Auto". Check "Match Whole String Only"
5. Follow steps 5 and 6 from above
7. Repeat 5 and 6 until you can open your drive normally.
hope that helps.
onfire
