Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » MonaRonaDona "virus"?
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Already Covered - Ignore »
« The tendency of (pre-checked) toolbars  
AuthorAll Replies

MysteryFCM

join:2006-10-01
England
reply to bcastner
Re: MonaRonaDona "virus"?

hiya dude

Been trying to find a sample of this that I can analyse but haven't been successful thus far


bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL

If I get a live one I will do a capture and post at MR.

Just read this "review" of Unigray Antivirus.
quote:
Re: unigray antivirus
by Kees Bakker - 2/27/08 5:20 AM
In reply to: monadonarona by Kees Bakker
I donwloaded their program and installed it (after Norton found it was virus-free). I must say it's amazing.

All it installs:
- the program itself, some 6 Mb
- an uninstall dat and exe
- an icon
- some shortcuts and pifs
- NO virus definitions

Then I ran it. It said:
Virus definition version: 02.73.88 (Februari 15, 2008)
DB version: 4.34/2008
Protecting against 679871 threads
That's fairly impressive for a company that's only on the web for 6 days.

Then (after disabling the real-time protection it offers, which is amazing on its own given the components it installed) I used it to scan my clean (according to Norton) system. It found:
- 240 viruses
- 48 malware
- 43 adware
Most of them were in Microsoft programs (like Visual Studio). And I'm sure they don't contain those viruses and malware. So these are false positives. I preferred not to run the Repair, for obvious reasons.

Then I checked for updated definitions. Couldn't harm, as I had none. So the program contacted their website (or so it said) and reported I already had the latest version (those of Februari 15, remember). Then I went to their (rather unimpressive) website and found out that they added detection for monaronadona on Februari 22.
Which leaves me wondering why so many of our new members report it cleaned it off their systems if it's a version one week older.

I'm uninstalling the program now, and still feel rather safe behind my firewall.

Somehow, I keep thinking this is a scam.

Kees

»forums.cnet.com/5208-6132_102-0.···=2715970
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users


jrmarto

join:2004-02-01
Norwich, CT

reply to MysteryFCM

This is fascinating to me as a co-worker of my husband's called me this morning complaining of this very infection, on a laptop I just helped her buy last week. She was using the Verizon subscription antivirus product. She told me she had "cured" it by creating another adminstrator account, moving her files over, and deleting her one week old account - but asked me if I had any suggestions. Never having heard of MondRonaDona I advised her to run an online scan at Trend Micro, download spybot and adaware, and keep an eye on what was going on with her computer. I would be happy to (on Monday) walk her through creating a HJT log if anybody is interested in seeing what is on her computer.


computeretarded

@embarqhsd.net

reply to bcastner
by live one, what do you mean? if you meant "some idiot that got the stupid monaronadona and doesn't know how to follow the directions you all have posted to fix it themselves" then i am totally your man!

email is up in the anonymizer... please respond.


SicilianShorty

@bresnan.net

reply to bcastner
Don't get the unigray anti-virus, since it sounds like they are the one to create the virus. Funny how they are the only virus removal software that can find the virus. Hum!

Anyway to remove the name from your taskbar after you remove it out of windows:
Run Regedit.exe (in Windows XP or later) for your registry editor and look for string HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main (Then scroll down to window title and you will find the MonaRonaDona - DELETE IT!!!!!!!)
It should be gone next time you reboot your computer.
Forums » Up and Running » Security » SecurityAlready Covered - Ignore »
« The tendency of (pre-checked) toolbars  


Friday, 27-Nov 13:51:51 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [119] Time Warner Cable Fires Broadside At Broadcasters
· [109] New AT&T Ad Campaign Hits Back At Verizon
· [95] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [70] TiVo Sees Record Customer Losses
· [68] In-Flight Internet Headed For Bumpy Landing?
· [60] Thanksgiving Open Thread
· [38] EFF Wages War On Fine Print
· [38] ICANN Slams DNS Redirection
· [36] Senators Want ACTA Made Public
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· Newegg Black Friday Sale started [Users Find Hot Deals]
· SSD [Computer Hardware Discussion/Reviews]
· Only firefox accesses Internet? [Security]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Bell Response to PIPEDA Request [TekSavvy]
· Not strictly "Home" related - but WOW anyways... [Home Repair & Improvement]
· [Newsgroups] Newzleech down? [Filesharing Software]
· [ PVP] 3.2 DK PvP D/W Spec... [World of Warcraft]
· HOW-TO: QoS and Tomato (fixes "choppy voice") [MagicJack]