Wayonmyway
@optonline.net
|  reply to bcastner
Re: MonaRonaDona "virus"?
Dear Bill,
I was hit with the MonaRonaDona last night. RegistryCleanFix2008 is the culprit. It is not just an innocent hijack from what I've seen, it will start to delete newly loaded software and will try to block your ability to access the Internet which gets in the way of being able to copy the file paths below. I was able to get it done in windows "safe mode" - I am running Vista. My computer seems to be running ok now but I still see the RegistryCleanFix2008 programs in a directory tree along with my other programs if I click my start key. Can they sit there harmlessly now?
Thanks for your help from all whom might have picked this piece of garbage up. Much appreciated.  |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
2 edits | Which one do you see there ?
RegistryCleanFix2008 or RegistryCleaner2008.exe ?
The repair removes..
rd /s/q "C:\Program Files\RegistryCleanFix2008">nul
If it is just a matter of seeing the entry in your start button area..you can right click on it and remove it from the list. It is just listed there because it was a recently used program.
--
Gladiator Security Forum »www.gladiator-antivirus.com/
Missing Kids
»www.missingkids.com/ |
|
wayonmyway
@optonline.net
| It is showing me it is a resident program: What I mean is I
Clicked on lower left icon windows vista start, brought my cursor up to programs to see if the program was still shown. Moved my cursor to my program directories and see directory for "RegistryCleanFix2008", within this directory I see three files, "RegistryCleanFix2008 on the web", "RegistryCleanFix2008" and "UninstallRegistryCleanFix2008".
Do I just click on my start icon, move my cursor over the program directory of "RegistryCleanFix2008" and hit delete. I have already run Bill's fixes and they cleaned up the IE header etc. and my computer seems to be running ok, albeit a little slower. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
1 edit | Do you see it also in your add/remove prgrams in the control panel ?
If your search for files on your PC and can you find RegistryCleaner2008.exe or RegistryCleanFix2008?
I would not think so.. therefore yes..just delete them there with the right click context menu.
Since there is an "UninstallRegistryCleanFix2008" in that area..if you click on it..does it then say files can not be found ?
this is good also since that proves the repair Bill gave you does work.
BTW; you can also navigate with your explorer to your Progam File folder. In that folder..do you find another folder for this RegistryCleanFix2008 and if so what are the contents of that folder?
--
Gladiator Security Forum »www.gladiator-antivirus.com/
Missing Kids
»www.missingkids.com/ |
|
wayonmyway
@optonline.net
 from:
Name Game 
| I went to the "control panel" icon on my desktop (I am writing with detail to be helpful to others). I then went to the icon "programs and features" which is used to uninstall, change or repair.
Unfortunately even after Bill's method (which worked), the program is still listed there as RegistryCleanFix2008 with my other programs, although the problems do seem to be resolved other than the program seemingly still in my computer. At this point should I just continue and delete this program using the control panel route?
I certainly don't need the RegistryCleanFix2008 program.
BTW, thanks for the help on this one.
|
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
2 edits | Yes try that first and see if it works. The other thing you could try is do Bill's repair again in the SAFE MODE..did you do it that way in the first place ?
It could be that the program was running and could not be deleted in the Window mode.
Thanks. |
|
wayonmyway
@optonline.net
| Originally got rid of it in safe mode. It has gotten rid of the pop up message, header in IE, etc.
The GOOD NEWS is I got an error message which told me: "An error occurred while trying to uninstall RegistryCleanFix2008. It may have already been uninstalled.
Would you like to remove RegistryCleanFix2008 from the Programs and Features List?" - I responded yes. It deleted the name from there.
I restarted my computer and went back to the start icon and manually will delete the directories in the programs directory. Hopefully I will not see any reference to this anymore. Thx. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC | And thank you for your time..it will help other  |
|
daveinpoway
Premium
join:2006-07-03
Poway, CA | Here's another article about this: »www.techworld.com/security/news/···04&email |
|
