AdobeR Remover

AdobeR open random port betwen 12000 and 19000 waiting for instructions, authorizing the remote takeover of the infected computer. It also fits in the firewall of Windows to enable him to connect itself to its waiter.

The Win32.RJump virus is propagated through the removable disks, the virus copies periodically there two files autorun.inf and AdobeR.exe, if you remove them, these two files will go back to their places a few seconds after his suppression.

Alternatives of this file : RavMon.exe or RavMonE.exe

The virus puts also a file in the Windows repertory:

• <Windows>\AdobeR.exe

And puts two files in all your partitions :

• Autorun.inf
• AdobeR.exe or RavMon.exe or RavMonE.exe

Creates the entry of registry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
RavAv
<Windows>\AdobeR.exe

This virus runs automatically each time you open or explore a partition, it is preferable to download the patch and unpack it on the desktop, reboot your machine in Safe Mode and run the patch, always in safe mode.
Instruction on how to restart your computer in safe mode.