Using Unigray Antivirus To Fix MonaRonaDona

I’ve often written about Rogue AntiVirus/AntiSpyware applications which claim to help remove malware but instead force you to pay before they’ll do what they claim.

This time to increase sales of a rogue application Unigray AntiVirus, they’ve actually distributed a virus called MonaRonaDona and have seeded many popular sites with the claim that only Unigray will fix it. Surprising Unigrey Antivirus has only been on the market since the end of February 2008 and requires a payment of $39 USD.

A few WinPatrol users have reported files trying to infiltrate their systems but have been successful in keeping them from being installed. So far the primary files are “RegistryCleaner2008.exe” and “Srvspool.exe” but I’m sure this will change with the next version. One of the characteristics of MonaRonaDona’s is to shutdown many programs including Windows TaskManager and RegistryEditor. Luckily, it doesn’t try to shutdown WinPatrol.

So, you don’t have to pay $39.95 and purchase Uniqray Antivirus to remove it. The free version of WinPatrol will do the trick as will many other free programs. Either way, never believe what you read in a few posts you find online when searching for a solution. Go to the help forums who have been celebrating years of helping users online.. When you read someone's post also take note to how long that user has been participating in the online forum.

More Info:

TreatFire Research Blog:
MonoRonaDona Mystery Solved

Security Fix:
The MonaRonaDona Extortion Scam

Forum Member Credentials can help you decide who to trust. Clicking on a member name can link you to more information and links to previous posts.