Disinfection
Trojan DisinfectionPerform full computer checkFollow the steps below:
1. Open F-Secure
2. Select the "Virus & Spy Protection" button
3. Click the link for "Scan my computer..."
4. Select "Perform full computer check" from the list
5. Please note the path and filenames of the malware found
6. Delete/Remove all files detected
Note: Please make that your Automatic Updates are enabled and that the definition databases are current.
Remove launch points and other malware entries from the RegistryFollow the steps below:
1. From the Start Menu; select Run; type "regedit" into the Open: field; click OK.
2. Once the Registry Editor has launched, navigate to the following registry keys:
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Locate and delete the value:
"Windows" = {path and filename of the malware found}
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Locate and delete the value:
"Window Title" = "MonaRonaDona"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
Locate and delete the value:
"SD" = {random numbers}
3. Restore any modified registy value if needed:
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
"DisableTaskMgr" = "1" to "DisableTaskMgr" = {previous value}
Note: If you have Task Manager enabled on your system by default, you may simply delete the value:
"DisableTaskMgr" = "1"
Repeat the full computer check to make sure the malware was completely removed.