OziFree accepts no responsibility for any damages caused by using the methods listed. We have tried these patches and they worked for us.
Due to the large amount of cries for help with this MonaRonaDona nuisance, and the lack of response by the Virus Software companies, we have published the simple patch that works.
MonaRonaDona is not actually a dangerous virus, but is really a pain in the butt, probably developed by some twit kid with nothing better to do.
It basically installs itself as srvspool.exe, disables the tabs on taskmanager, and changes the page captions.
Coincidentally, at the time this virus appeared, a program by UniGray magically appeared on the market, claiming to be able to detect the MonaRonaDona, well before Norton, Mcafee and even Microsoft had even heard of it!!
Full credit for this fix goes to the original author, and the original post here at www.dslreports.com
To simplify the process we have included the actual code into a text box for you to copy paste.
Paste this code into NOTEPAD, save to the desktop as monafix.cmd or monafix.bat, reboot holding down the F8 key to boot into Safe Mode, double click the monafix.cmd to execute the patch, shutdown and reboot normal into windows, and the nuisance MonaRonaDona is gone! Phew!
A copy of the original post and source code is posted here below, with all the necessary instructions.
bcastner
Premium
join:2002-09-25
Chevy Chase, MD
clubs: [Folding@Home] [Team Discovery]
edit:
February 29th, @11:13PM
reply to bcastner
MonaRonaDona Removal Tool
Using your mouse, Highlight and then Right-click | Copy the entire contents of the Quote box below, including blank lines:
quote:@echo off
cd %~dp0
REM Quick cleanup - Restores Task Manager,
REM Fixes the IE Header, and Removes the Trojan MonaRonaDona.
REM DSLR Security Forum, Bill Castner
REM If you find this file, go ahead and delete it
TSKILL SRVSPOOL /A >nul
del /a/f/q "%systemdrive%\Documents and Settings\All Users\Start Menu\Programs\Startup\SRVSPOOL.EXE"
(
echo.REGEDIT4
echo.
echo.[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
echo."DisableTaskMgr"=dword:00000000
echo.
echo.[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
echo."WindowTitle"=-
echo.
echo.
)>checkit.reg
regedit /s checkit.reg
del checkit.reg
del %0
exit
Open a new Notepad session (Do not use a Word Processor or WordPad). Click "Format" and be certain that Word Wrap is not enabled. Right-click | Paste the Code box contents from above into Notepad. Click File, Save as..., and set the location to your Desktop, and enter (including quotation marks) as the filename: "KillTrojan.cmd" . Exit.
Double click the new file "KillTrojan.cmd" to run the program. There is a black box that will open but there are no user prompts, and this will take only moments to complete.
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
