Re: MonaRonaDona

X-post to Security and IE Security newsgroups.

It appears to be a harmless scam but you'll need expert assistance to remove 
it; cf. cf. http://www.dslreports.com/forum/r20082590-MonaRonaDona-virus and 
http://forums.cnet.com/5208-6142_102-0.html?forumID=32&threadID=285491&m
essageID=2714709

cf. 
https://www.bullguard.com/forum/10/Redirecting-and-suspecting-tro_60005.html 
("a window poped up saying 'hello - i am monaronadona and i am a virus. i 
have infected u and i will wreck your pc...'")

QED: How does the machine get infected?
====================================
Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log 
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
   http://aumha.org/a/quickfix.htm
   http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
   http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use. 
It will help you to both identify and remove any hijackware/spyware with 
assistance from an expert.  **Post your log to 
http://forums.spybot.info/forumdisplay.php?f=22, 
http://castlecops.com/forum67.html, 
http://forums.subratam.org/index.php?showforum=7, 
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review 
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this 
isn't your cup of tea - take the machine to a local, reputable and 
independent (i.e., not BigBoxStoreUSA) computer repair shop.
-- 
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


mrs1945 wrote:
> I read each reply given on how to rid my pc from this problem.
> I ran regedit.exe, then  HKEY_CURRENT_USER\Software\Microsoft\Internet
> Explorer\Main.....  at this point I have two files:
>
> Default Feeds - containing:
> ,
> ,
> 
>
> FeatureControl - containing:
> FEATURE_LOCALMACHINE_LOCKDOWN.  In this folder is a subfolder
> entitled "Settings."
>
> I have looked thoroughly through each of these folders and I do not see 
> the
> "Window Title - MonaRonaDona."
>
> What should I do now?
> Thanks in advance,   Mary