>
>"PD43" <pauld1943@comcast.net> wrote in message
>news:8s48s3lqgcr29ujtp10njtgipnq1nitloh@4ax.com.. .
>> "M.I.5¾" <no.one@no.where.NO_SPAM.co.uk> wrote:
>>
>>
>>>It has frequently been demonstrated that if you connect a PC to the
>>>internet
>>>without a virus checker then the longest it is likely to last before a
>>>virus
>>>invades is around 15 minutes.
>>
>> Whatta bunch of bull****.
>>
>
>I can only assume that you believe that the only way malware can get to your
>machine is if you visit a web site that carries that malware (that is
>certainly the vein of your postings). Believe me, sunshine, that just ain't
>the case. Although much malware does work that way, an equal or larger
>number of species does not. These things can propagate themselves without
>any help or assistance from you or I.
You've taken it from "virus" to "malware". Fine. I'll read on.
>
>A few years ago we had the dubious privilege of watching a self replicating
>worm spreading around our network of PCs without any of them looking at
>anything on the internet or intranet.
I'm not on a network, bucko.
> It might have been difficult to keep
>up except that it actually slowed down probably due to all the network
>traffic each copy was generating looking for new uninfected machines to
>transfer itself to. It took a couple of hours to do the whole network of
>several thousand machines, but it's probably accurate to say that the
>infection also spread to other machines and networks conected to the
>planetary network.
You're assertion that a "virus" (which you now correctly call a
"worm") can enter my system within 15 minutes of starting - if I don't
have a virus checker operating - is still utter bull****.
>I run an anti-virus program and six different anti-spyware programs, in
>addition to a firewall. In my case, nothing more than Tracking Cookies has
>ever been found.
I have been running AVG Anti-virus for quite some time now. Prior to
XP, I rarely ran an anti-virus... mainly because my system prior to
installing XP was minimal, and didn't have a lot of RAM.
That, plus the fact that worms, etc. were less prevalent prior to that
time made my exposure less probable.
I still don't run any resident malware obstructers, and when I ran the
free scanning programs from several vendors, they ONLY found tracking
cookies (doubleclick, etc. ) as problems.
MonaRonaDona is a virus which closed my programs & had an annoying pop
up over the taskbar. I tried 5 different Anti-spyware & antiviruses but
none worked. Finally it was Unigray Antivirus ('Unigray Antivirus:
Perfect security solution for professional and home users'
(http://www.unigray.com)) that provided me relief from MonaRonaDona.
"Shenan Stanley" <newshelper@gmail.com> wrote in message
news:ezCxm3IeIHA.3756@TK2MSFTNGP06.phx.gbl...
> Lou wrote:
>> Does anyone know what the above Subject phrase is all about?
>> It appears when I access the Internet at the end of the page name.
>> For instance: The top line of my home page reads "(My ISP) Start
>> Page - MonaRonaDona"
>> It continues to appear on all pages that I access.
>
> Shenan Stanley wrote:
>> Somebody added it to your Titlebar - likely through registry/group
>> policy.
>> Look in your registry:
>>
>> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
>> "Window Title"=
>
> Lou wrote:
>> Many thanks. Title removed.
>> Was it a virus that placed it on my computer?
>
> Virus installed applicatioon, malware. I should have stated,
> "Somebody/something added it to your Titlebar - likely through
> registry/group policy."
>
> Most of the buzz on it points to some software called, "Unigray
> Antivirus". Did you install that lately?
>
> Have you rebooted and made sure the title does not get 'put back'?
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
I just now did that and Mona etc. is back.
I went to regedit again and Mona etc. was listed as the Window Title. I
deleted that name and added my own.
I rebooted my computer and Mona etc. was back.
I tried without success to "save" the registry after I had made the change.
Any further help would be greatly appreciated.
Lou
>I just now did that and Mona etc. is back.
>I went to regedit again and Mona etc. was listed as the Window Title. I
>deleted that name and added my own.
>I rebooted my computer and Mona etc. was back.
>I tried without success to "save" the registry after I had made the change.
>Any further help would be greatly appreciated.
Do you have anything running that is supposed to keep you or anyone
else from messing with Explorer's settings???
Like any malware blocker or anti virus program that has a "watch"
function that continuously monitors your system??
"PD43" <pauld1943@comcast.net> wrote in message
news:epl8s3dhr61qo165aclmf8q0dunj1a45hn@4ax.com...
> "M.I.5¾" <no.one@no.where.NO_SPAM.co.uk> wrote:
>
>>
>>"PD43" <pauld1943@comcast.net> wrote in message
>>news:8s48s3lqgcr29ujtp10njtgipnq1nitloh@4ax.com. ..
>>> "M.I.5¾" <no.one@no.where.NO_SPAM.co.uk> wrote:
>>>
>>>
>>>>It has frequently been demonstrated that if you connect a PC to the
>>>>internet
>>>>without a virus checker then the longest it is likely to last before a
>>>>virus
>>>>invades is around 15 minutes.
>>>
>>> Whatta bunch of bull****.
>>>
>>
>>I can only assume that you believe that the only way malware can get to
>>your
>>machine is if you visit a web site that carries that malware (that is
>>certainly the vein of your postings). Believe me, sunshine, that just
>>ain't
>>the case. Although much malware does work that way, an equal or larger
>>number of species does not. These things can propagate themselves without
>>any help or assistance from you or I.
>
> You've taken it from "virus" to "malware". Fine. I'll read on.
Malware is a superset of virus.
>>
>>A few years ago we had the dubious privilege of watching a self
>>replicating
>>worm spreading around our network of PCs without any of them looking at
>>anything on the internet or intranet.
>
> I'm not on a network, bucko.
>
You said that you surf the internet. The internet is a very large network.
Ergo, you *are* on a network.
>> It might have been difficult to keep
>>up except that it actually slowed down probably due to all the network
>>traffic each copy was generating looking for new uninfected machines to
>>transfer itself to. It took a couple of hours to do the whole network of
>>several thousand machines, but it's probably accurate to say that the
>>infection also spread to other machines and networks conected to the
>>planetary network.
>
> You're assertion that a "virus" (which you now correctly call a
> "worm") can enter my system within 15 minutes of starting - if I don't
> have a virus checker operating - is still utter bull****.
>
> You're assertion that a "virus" (which you now correctly call a
> "worm") can enter my system within 15 minutes of starting - if I don't
> have a virus checker operating - is still utter bull****.
WRONG. Look up about the Blaster Worm (for one example). This is why XP
SP2 has the firewall turned ON by default...prior to that it was turned
OFF by default, and I have personal experience of an un-protected
machine being infected in TWENTY SECONDS after having connected to the
internet with no protection.
Look it up, it's well documented.
Despite lack of information on the Internet, I was able to pinpoint the
culprit that was causing my machine to start acting up due to the
MonaRonaDona virus.
I was able to fix the problem and here is how.
The virus installs an executable SRVSPOOL.EXE in the startup folder of the
all users account. Click Start/Programs/Startup, right click the
SRVSPOOL.EXE entry and delete it. How to fix the header of your Internet
explorer and how to re-enable taskmanager, is posted in numerous postings
online.
The virus puts a message on the screen. Aside from that, the task manager
is disabled, the header of Internet Explorer is modified and when trying to
open programs, those programs are shut down immediately.
Whatever you do, do NOT download and install the virus scanner named
UniGray. That "scanner" is a scam, a non-working piece of software. The
website tries to get you to register and pay for something that does nothing.
Hope this info helps those who come across this virus. It seems to be a
brand new occurence given the lack of solutions found on the Internet.
"Lou" wrote:
> Does anyone know what the above Subject phrase is all about?
> It appears when I access the Internet at the end of the page name.
> For instance: The top line of my home page reads "(My ISP) Start Page -
> MonaRonaDona"
> It continues to appear on all pages that I access.
> -----
> Lou
>
>
>
Does anyone know what the above Subject phrase is all about?
It appears when I access the Internet at the end of the page name.
For instance: The top line of my home page reads "(My ISP) Start Page -
MonaRonaDona"
It continues to appear on all pages that I access.
-----
Lou
Despite lack of information on the Internet, I was able to pinpoint the culprit that was causing my machine to start acting up due to the MonaRonaDona virus.
I was able to fix the problem and here is how.
The virus installs an executable SRVSPOOL.EXE in the startup folder of the all users account. Click Start/Programs/Startup, right click the SRVSPOOL.EXE entry and delete it. How to fix the header of your Internet explorer and how to re-enable taskmanager, is posted in numerous postings online.
The virus puts a message on the screen. Aside from that, the task manager is disabled, the header of Internet Explorer is modified and when trying to open programs, those programs are shut down immediately.
Whatever you do, do NOT download and install the virus scanner named UniGray. That "scanner" is a scam, a non-working piece of software. The website tries to get you to register and pay for something that does nothing.
Hope this info helps those who come across this virus. It seems to be a brand new occurence given the lack of solutions found on the Internet.
QED: How does the machine get infected?
====================================
Unexplained computer behavior may be caused by deceptive software http://support.microsoft.com/kb/827315
Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/
Lou wrote:
> Does anyone know what the above Subject phrase is all about?
> It appears when I access the Internet at the end of the page name.
> For instance: The top line of my home page reads "(My ISP) Start Page -
> MonaRonaDona"
> It continues to appear on all pages that I access.
> -----
> Lou
Re: MonaRonaDona 
Linear Mode
