Warning Destructive Virus

  Expat 1 16:48 07 Mar 2008

I have in the last hour picked up a Virus on my laptop named MonaRonaDona Virus.

Have run Windows Defender, AVG Anti Virus Free, Run Reg Scrub and Spybot Search & Destroy to no avail.

Has/is anyone else experiencing this problem?

It threatens to cause strange behaviour to the PC the only thing at the moment is Spybot is denying acces to a registry change in my start menu.

The Virus "Welcome" screen is permenantly occupying about a quarter of the laptop screen.

  big bloke66 17:12 07 Mar 2008

This thread may help.click here

  Cockney Rebel 17:14 07 Mar 2008

This may also help.
click here

  Expat 1 17:19 07 Mar 2008

Any Idea how to get rid of this thing.

I am administrator on this laptop and am now being told that I have disabled Task Manager. I have not been near Task manager at all. can only assume that this Nutters virus has infected it.
The text of the thing is

Hy, My name is MonaRonaDona.i am a virus & am here to Wreck your PC. If you observe strange behavior with your Pc,like programwindows disappearing etc, it's me doing all this. I was created as a protest against the Human Rights Violation being observed throughout the world & the very purpose of my existence is to remind & stress the world to respect humanity. END

I only display the text to see if anyone has a clue as to where it comes from. These nutters do have a common trend to their modus operandi.

  rawprawn 17:22 07 Mar 2008

I suggest you post this click here together with HJT Log.

  Totally-braindead 17:23 07 Mar 2008

If you look at what big bloke66 linked you to the advice there got rid of it.

  Fruit Bat /\0/\ 18:42 07 Mar 2008
  mfletch 19:03 07 Mar 2008

I have put this together from posts from this forum,

I hope the links work,



The virus installs an executable SRVSPOOL.EXE in the startup folder of the all users account.

Click Start/Programs/Startup, right click the SRVSPOOL.EXE entry and delete it


IE title bar fix

Change Title Bar
Start, Run, Regedit, enter.

Expan HKEY, CurrentUser, Software, Microsoft, Internet Explorer, Main.

Highlight Main, On the right scroll down to Window Title.

Highlight Window Title. Right click, Modify and change it to what you like. Click OK.


Task manager repair
Method 1

Click Start, Run and type this command exactly as given below: (better - Copy and paste)

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

Method 2

Download and run this REG fix click here and double-click it.

Method 3

* Click Start, Run and type Regedit.exe
* Navigate to the following branch:

HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies\ System

* In the right-pane, delete the value named DisableTaskMgr
* Close Regedit.exe

Method 4: Using Group Policy Editor - for Windows XP Professional

* Click Start, Run, type gpedit.msc and click OK.
* Navigate to this branch:

User Configuration / Administrative Templates / System / Ctrl+Alt+Delete Options / Remove Task Manager

* Double-click the Remove Task Manager option.
* Set the policy to Not Configured

  Expat 1 19:54 07 Mar 2008


Have tried
Click Start/Programs/Startup, right click the SRVSPOOL.EXE entry and delete it

But just get message Access denied

Have also tried Run: regedit.exe but on clicking OK just getting nothing.

Any other suggestions will be gratefully appreciated

Expat 1

  mfletch 20:03 07 Mar 2008

Try right click delete in safe mode,

Reboot into SAFE MODE

1/Click Start and then click Turn Off Computer.
2/In the Turn Off Windows dialog box, click Restart, and then click OK.
3/As your computer restarts but before Windows launches, press F8 repeatedly.
4/Use the arrow keys to highlight Safe Mode, and then press ENTER.
5/If you have a dual-boot or multiple-boot system, choose the installation that you need to access using the arrow keys, and then press ENTER.
Note: If Windows launches before you can choose a safe mode, restart your computer and try again
PS/ Sometimes it maybe the F5 key

  Expat 1 20:15 07 Mar 2008


Your Click Start/Programs/Startup, right click the SRVSPOOL.EXE would not complete in normal start up

So Started laptop in Safe mode and it worked from there.
Now to tackle Task Manager problem

Thanks a million for your help everyone so far. Feel a bit isolated out here in Spain at times like this.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Alienware 17 R4 2017 review

Illustrator Sylvain Tegroeg created thousands of intricate line drawings for the mobile game…

Best iPad buying guide 2017

Comment télécharger une application indisponible en France ?