Closed for Maintenance

NOTE: This notice has been updated

Updates 7/21 1:30PM EDT The entire site has been moved to the new server. Testing the new site.

7/21 6:00PM EDT Since the site is already down, discussions are underway to vastly speed up a planned site revision. We will keep you posted.

7/22 2:00PM EDT The decision was made yesterday to go ahead with the new site. More security; better functionality. We are sorry for the inconvenience, We're working hard to have the new site up as soon as possible.

We regret to inform you that a small number of visitors to our site have been infected with a virus. Extensive virus tests have shown no problems on the Restore The Republic site. It does not appear that this has come directly from our site, but we are taking all due caution.

We have not been able to reproduce the virus through literally hundreds of logins to the site using several different browsers and browser versions, and have had only 5 complaints. Of course, that's 5 too many.

Reports we have received indicate that this virus may (or may not) be introduced by a QuickTime update ActiveX helper object. This would explain why only a few people have been infected.

If you receive a notice to update your QuickTime plugin, while on this or any other site, DO NOT accept it.
We have received a report of the same sequence of events occurring on another site completely unrelated to RTR.
If you think your QuickTime plugin needs updating, go to the Apple web site and update it manually.
We want you to know that your security is important to us. We are taking extensive means to assure that no virus came directly from our site.

Here Is What We Are Doing

Even though we feel the virus is not originating from our site, we are in the process, at this moment, of moving the site to a new server, for the sake of your confidence as well as ours. A new Restore The Republic Web site has been in the works. We are going ahead and implementing in sooner than originally planned. This new site will be on the new server with software that will provide improved functionality.

Questions? Call Toll-Free: 877-376-7544

If you have been infected with this virus, you will know right away, as the malicious code changes your desktop wall paper to a bright blue screen and displays a message that a virus has been detected. (see below)

It will then display a popup with a selection to answer "yes" or "no" as to whether you want to remove this virus. DO NOT SELECT EITHER! Instead, follow the instructions below.
Since we have not been able to recreate this problem, If you were infected, and you can relay the exact steps leading up to this event, please call toll-free at 877-376-7544.
Thank you.

Below is a sample of the visual changes in your desktop you will see immediately if you have been infected. Please note that this screen is available elsewhere on the net. It was not designed by the malware perpetrators.

virus screen

Best Fix for ctfmona virus

Before we start fixing anything you should print out these instructions or copy them to a NotePad file so they will be accessible. Some steps will require you to disconnect from the Internet or use Safe Mode and you will not have access to this page.

Download SDFix by AndyManchesta and save it to your desktop. More Info on SDFix.
When using this tool, you must use the Administrator's account or an account with "Administrative rights"

* Double click SDFix.exe and it will extract the files to %systemdrive%
* (this is the drive that contains the Windows Directory, typically C:\SDFix).
* DO NOT use it just yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Open the SDFix folder and double click RunThis.bat to start the script.

Type Y to begin the cleanup process.
It will remove any Trojan Services or Registry Entries found then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts, the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.

You can also do this manually by following these instructions at TrendMicro, although we believe the above method is preferable and safer.