PA Bear [MS MVP] wrote:
> X-post to IE General and Security newsgroups.
>
> It appears to be a harmless scam but you'll need expert assistance to
> remove
> it; cf. cf. http://www.dslreports.com/forum/r200...RonaDona-virus
> and
> http://forums.cnet.com/5208-6142_102...sageID=2714709
> cf.
> https://www.bullguard.com/forum/10/R...tro_60005.html
> ("a window poped up saying 'hello - i am monaronadona and i am a virus. i
> have infected u and i will wreck your pc...'")
>
> QED: How does the machine get infected?
<snip>
> Lou wrote:
>> Does anyone know what the above Subject phrase is all about?
>> It appears when I access the Internet at the end of the page name.
>> For instance: The top line of my home page reads "(My ISP) Start Page -
>> MonaRonaDona"
>> It continues to appear on all pages that I access.
>> -----
>> Lou
I very much doubt that enabling all SpywareBlaster protections and disabling
SRVSPOOL.EXE from loading at boot has left the macine in a clean state. See http://www.dslreports.com/forum/r200...RonaDona-virus
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/
Canuckluck wrote:
> After downloading Spywareblaster I was able to change the Blue Titlebar
> to Microsoft Internet Explorer instead of it saying MonaRonaDona !!!
> Hurrraaayyy !!!!!
>
> Thank you Spywareblaster !
>
> My computer should be free of this virus, trojan, worm, whatever it
> was.
>
> I now have extra protection with Spywareblaster.
>
> It took alot of searching and thought but I am finally free of it, I
> hope ??
>
> The steps I took were easy;
>
> Disable System Restore , restore later when done.
>
> Start in Safe mode if preferred,
>
> Run > Msconfig > Start-up
>
> ..uncheck SRVSPOOL.exe
> ..restart computer
>
> MonaRonaDona should be gone !!!
>
> To change blue title bar:
>
> Download Spywareblaster and follow directions, very easy !
>
> Make sure you remove/delete any shortcuts it left on your computer
> also.
> Check your Startup menu on the Start/Programs and delete from there as
> well.
> Delete from your Recycle Bin as well.
>
> This should solve your problem with MonaRonaDona
Yes, it is true, I know the Srvspool is still there, but it is disabled. I cannot just delete it, only disable it from the Start-up.
I have not seen the MonaRonaDona appear on any window since I did this.
With all the tools I have, you would think I could, but, alas, I cannot completely get rid of it.
I have read the articles from Castner, but, they are too technical for me.
The only problem I have is the constant Malware that re-routes my Search pages, but only when I use Google on IE. , which is my home page. It doesn't happen on MSN search.
Another annoying problem I have is other windows showing up with AVS System Scanners, etc. , wanting me to DL their programs. This happens only when I first click on one of my icons on the desktop, example: Hotmail
I do spyware scans everyday , I have virus protection with Nortons, I do registry checks, the whole nine yards, but, they keep coming back !
I feel at this time the only option left for me is to reformat my computer!
I have HijackThis, Spybot, Spywareblaster, Ad-Aware SE, AML Registry Cleaner & Nortons, how much more do I need to protect my computer ???
They all list the malware that I am having problems with, but none seem to remove it completely ! Very frustrating !
PA Bear [MS MVP] wrote:
> cf.
> http://blog.washingtonpost.com/secur...nadona_ex.html
>
> PA Bear [MS MVP] wrote:
>> X-post to IE General and Security newsgroups.
>>
>> It appears to be a harmless scam but you'll need expert assistance to
>> remove
>> it; cf. cf. http://www.dslreports.com/forum/r200...RonaDona-virus
>> and
>> http://forums.cnet.com/5208-6142_102...sageID=2714709
>> cf.
>> https://www.bullguard.com/forum/10/R...tro_60005.html
>> ("a window poped up saying 'hello - i am monaronadona and i am a virus. i
>> have infected u and i will wreck your pc...'")
>>
>> QED: How does the machine get infected?
> <snip>
>> Lou wrote:
>>> Does anyone know what the above Subject phrase is all about?
>>> It appears when I access the Internet at the end of the page name.
>>> For instance: The top line of my home page reads "(My ISP) Start Page -
>>> MonaRonaDona"
>>> It continues to appear on all pages that I access.
>>> -----
>>> Lou
Re: MonaRonaDona 
Linear Mode
