Info Desperada
@rr.com |  reply to bcastner
Re: MonaRonaDona "virus"?
Thanks to "BCASTNER", I removed MonaRonaDona. IT WORKS! |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| reply to classical62
said by classical62  :That sounds about right. Is this passed through Emails I have sent to people? Is this Unigray anti-virus hoping I will want to buy their "protection" and that's why I got it? Don't know about the email but I do not think so..on the other..It is not the first time some group stocked a lake..made you use their fishingpole then charged you by the inch to catch them. 
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
paul newbee
@co.uk | reply to bcastner
 Thanks so much for ur info keep up the good work |
|
ChasG
@viennava.gov
| reply to bcastner
Well Bill, I used your fix over the weekend for a friend of mine. In his case we had to go in using Safe Mode to delete the entry from the Startup folder, but once we did that everything was fine.
Thanks for posting the fix - surprising that this is not getting more attention on the main AV sites. Even if all they did was post an advisory it would be nice, but even today if you do a google search you come up with yahoo, cnet and dslreports...
Having been in the software support and development industry for years, as soon as I saw the post regarding UniGray I felt my spidey-senses go off. For the money they pay at Symantec, McAfee, TrendMicro and others, it is rare enough that none of them had anything to say about a new virus - but then to have some unknown company show up from nowhere and claim they were the only software available to deal with the threat ... well, it was pretty obvious something was not right. I hope all the people reading this contact their credit card companies immediately to protest the fraudulent charges, and take whatever other action they can to make sure whoever is behind UniGray is prosecuted. What these guys did was perpetrate a fraud.
Thanks again. |
|
Blackbird
Built for Speed
Premium
join:2005-01-14
Fort Wayne, IN
 ·Verizon Online DSL
| said by ChasG :
... What these guys did was perpetrate a fraud. Thanks again. And somehow, I don't think that troubles them in the least. Where we may think in terms of right and wrong, others may think in terms of getting away with it or not... and how best to get away with it, at that.
--
If God wanted us to work with electrons, He'd make them big enough to see... |
|
Panicked Teacher
@qwest.net |  reply to bcastner
Thank you soooooo much! I was completely panicked!!! Your instructions were easy to follow and I VERY MUCH appreciate your help!!! (XP User) |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
1 edit | reply to bcastner
unigray antivirus analysis
»securitynewsfromthenet.blogspot.···sis.html
and as already posted earlier in this thread..
We detect MonaRonaDona as Trojan.Win32.Monagrey.a and Unigray Antivirus as not-a-virus:FraudTool.Win32.Unigray.a.
»www.viruslist.com/en/weblog?webl···08187485
Copyright © 1996 - 2008
Kaspersky Lab
Industry-leading Antivirus Software
All rights reserved |
|
lordstarfyre
join:2008-03-03
91g02 | reply to bcastner
Hi, I ran the KillTrojan.CMD, and now my Task Manager is disabled.
How do I turn it back on?
It appears the Trojan is gone, thanks for that, BTW!!! |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
2 edits | said by lordstarfyre :Hi, I ran the KillTrojan.CMD, and now my Task Manager is disabled. How do I turn it back on? It appears the Trojan is gone, thanks for that, BTW!!! You could try the .reg file here if the OS is XP.
»www.kellys-korner-xp.com/xp_tweaks.htm
download it at #51 called Enable the Task Manager
put it on the desktop..double click on it to install..then you might have to reboot.
Also if by chance there are other reasons your's does not work then see this link and scroll down to Task Manager and see all the situations and fixes since there are three ways to bring it up.
»www.kellys-korner-xp.com/xp_t.htm
--
Gladiator Security Forum »www.gladiator-antivirus.com/
Missing Kids
»www.missingkids.com/ |
|
Kim C
@as9105.com | reply to jimschoe
Try starting in safe mode(F8) you should then be able to delete it.
Don't know how to re-start the task manager though.
Best of luck. |
|
aspen
| reply to bcastner
thank you, thank you for the help removing monaronadona and then the subsequent help with the task manager issue. I am self-employed and use my computer for my lifelihood as a daytrader, however, am completely non-tech savvy. Your instructions were excellent and worked perfectly. |
|
BigMinge
join:2008-03-03
Wethersfield, CT | reply to bcastner
Thanks for this. I to found this when i turned my comp on. |
|
terry_nyorks_uk
@btcentralplus.com
| reply to bcastner
Thanks too to B Castner. Your batch file "killtrojan.cmd" worked well. WinXP environment.
How come Norton asleep? |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| On norton..did you try to force a manual update or try to get their daily >
»Re: Security Software Updates - 03 Mar 2008
Daily Updates Learn More
»www.symantec.com/business/securi···ions.jsp
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
kf
@net.au | reply to bcastner
This was succesful in removing Monaronadona virus for me. Thankyou! |
|
bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs: 
·Verizon Online DSL
1 edit | reply to bcastner
Where does MonaRonaDona come from?
quote:
"We’re still researching this", says Joel Schouwenberg of Kaspersky Labs, who calls the MonaRonaDona Trojan of the past week to be "among the most elaborately orchestrated scams" he’s seen.
See if these help:
»blog.threatfire.com/
»blog.washingtonpost.com/security···_ex.html
»www.networkworld.com/news/2008/0···cam.html |
|
dentalchick007
@comcast.net | reply to bcastner
Hey I did this to fix the virus and it worked for me! Nothing else did. Thank you so much. |
|
sc
@rr.com | reply to bcastner
Thanks so much for the help. It worked and thank goodness it is gone. |
|
Whateve
@charter.com
| reply to HVredeling
This worked great : ) I was able to do it in safe mode but if I tried otherwise it had disabled my administration rights. My virus scan still didn't pick it up but it seems to be gone : ) Thanks so much for the information, I was at the end of my rope with this thing! |
|
windfire55
@telus.net
|  reply to Sassygal31023
Be really careful as unigray says that they have the answer
to this malware,but Its a ruse,First no aunthenticity cert.
Second The product does not completely remove MRD-virus until unigray sends you a patch (monadonarona.exe)to remove
the virus and again...no authenticity certificate and It seems that I got the virus right after I had downloaded
the google tool bar,As with everyone else I seem to have recieved it through the browser it all started happening
on Febuary 29/2008 |
|
