In the command prompt type the drive letter: and press enter . Now type dir /w/a and press enter.

In command prompt type attrib -r -a -s -h *.* and press enter
command del filename. example del Ravmon.exe

for make sure i suggested u try to block it
go Control Panel-Administrative Tools-Local Security Policy-Software Restriction Policies-rghtclick Create New Policies
chose Additional Rules-rghtclk New Path Rules block drive USB or other by dissalowed
click apply
i try my self it can block almost file type like exe and scripts

If your system is infected by this virus you can’t see hidden files and folders , even after applying the settings to show hidden folders. This setting is reverted back to Don’t show hidden files and folders by the virus.

This happens because virus protects the two hidden ,system files called d.com and autorun,inf which are created by amvo.exe and amvo0.dll , amvo1.dll which resides in system32 folder on the OS drive (hard disk partition on which windows operating system is installed).

Fix:

In order to fix the problems caused by this virus ,you will need to delete all these files created by the virus.

Follow the set of commands to delete these files


1. Open Start>>Run and type cmd and press enter. This will open windows command prompt window. On this window, type as directed in steps further and press enter at the end of each step.

2. type cd\

3. type cd windows\system32

4. type attrib -r -h -s amvo.exe

5. type del amvo.exe

6. type attrib -r -h -s avmo0.dll ,repeat the steps 5 and 6 again to delete avmo1.dll

7. now type d: and press enter for d: drive partition.

8. type attrib -r -h -s autorun.inf

9. type del autorun.inf

10. type attrib -r -h -s d.com

11. type del d.com