|
Posted on 5-3-08 MonaRonaDona Antivirus, A Virus
5 March, 2008
On seeing so-called a Trojan "MonaRonaDona virus", ignore the
recommendations that come with it and use your normal anti-virus to remove
it. MonaRonaDona is part of an elaborate scam to sell fake antivirus
software.
The MonaDonaRona Trojan displays a broadly visibly message "Welcome to
MonaRonaDona. I am a Virus & I am here to wreck your PC. If you observe
strange behaviour with your PC, like program Windows disappearing, etc.,
it's me who's doing this." The message claims it's all part of a human
rights protest. But according to Kaspersky Lab researcher Roel
Schouwenberg, MonaRonaDona is mainly a way to panic victims, who then may
start a web search to find out more about it, only to find fake online
stories and bogus commentary that instruct victims to use fake antivirus
tools — the prominent one being called Unigray, available from the
Unigray.com website, for about US$39.00.
"There was a link at Digg and at YouTube promoting it," says Schouwenberg,
who writes about it in a Kaspersky Lab blog posting.
How does the MonaRonaDona Trojan manage to propagate? Kaspersky Lab sees a
link with another piece of "fake" software called RegistryCleaner 2008.
"We're still researching this but it may be connected with this," says
Schouwenberg, who calls the MonaRonaDona Trojan of the past week to be
among the most elaborately orchestrated scams he's seen. The bottom line
is to clean computers with software from valid antimalware vendors that
can detect the bad code, he adds.
|