Trojan:W32/MonaGray.A

Perform full computer check

Follow the steps below:

• 1. Open F-Secure
• 2. Select the "Virus & Spy Protection" button
• 3. Click the link for "Scan my computer..."
• 4. Select "Perform full computer check" from the list
• 5. Please note the path and filenames of the malware found
• 6. Delete/Remove all files detected

Note: Please make that your Automatic Updates are enabled and that the definition databases are current.

Remove launch points and other malware entries from the Registry

Follow the steps below:

• 1. From the Start Menu; select Run; type "regedit" into the Open: field; click OK.
• 2. Once the Registry Editor has launched, navigate to the following registry keys:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunLocate and delete the value:"Windows" = {path and filename of the malware found}
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MainLocate and delete the value:"Window Title" = "MonaRonaDona"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersionLocate and delete the value:"SD" = {random numbers}
• 3. Restore any modified registy value if needed:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System"DisableTaskMgr" = "1" to "DisableTaskMgr" = {previous value}
  • Note: If you have Task Manager enabled on your system by default, you may simply delete the value:"DisableTaskMgr" = "1"

Repeat the full computer check to make sure the malware was completely removed.