Spyware Techie

Published by Allen on March 10, 2008 11:22 am under Spyware Help

Advertisement (advertise here?)

Do you know what MonaRonaDona is?

DESCRIPTION

MonaRonaDona is a browser hijacker that was created to promote rogue anti-spyware. MonaRonaDona is mainly designed as a pushy marketing tool to push the parasite called Unigray AntiVirus onto computer users. MonaRonaDona uses sneaky tactics to get users to purchase fake anti-virus software and is potentially dangerous because it goes undetectable by other anti-virus programs. Unigray along with MonaRonaDona run hand-in-hand to make your computer use experience a real nuisance with annoying popups, false startup messages and slowing the performance of your computer.

MonaRonaDona is more than just a silly name for a painting, it is a very clever parasite that displays sarcastic messages. MonaRonaDona is installed from the Vundo Trojan infection which is usually downloaded through a video codec.

Do you ever get this message?

Hi, My name is MonaRonaDona. I am a Virus & I am here to Wreck Your PC. If you observe strange behavior with your PC, like program windows disappearing etc, itâ€™s me who is doing all this. I was created as a protest against the Human Rights Violation being observed throughout the world & the very purpose of my existence is to remind & stress the world to respect humanity.

The quote above is an example of a message from a computer that is infected with the Trojan that installs MonaRonaDona.

In non-techie terms: MonaRonaDona is similar to other spyware infections that come from a trojan infection. MonaRonaDona makes attempts to get users to purchase the Unigray Antivirus program which is malicious software. Do not under any circumstances purchase any type of software that MonaRonaDona promotes especially Unigray.

MonaRonaDona Removal Guide Automatic Removal Instructions

MonaRonaDona Manual Removal Instructions

This manual removal method is for techie computer users. MonaRonaDona manual removal may be difficult and time consuming to remove. There’s no guarantee that the infection will be removed completely. So read the removal steps carefully and good luck.

Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

Uninstall MonaRonaDona Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall the infection if found.
To stop MonaRonaDona processes (view process removal steps)
Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
Search and stop these processes:
SRVSPOOL.exe
RegistryCleaner2008.exe
For each unwanted process, right-click on it and then select “End task”.
To Unregister MonaRonaDona DLLs (view DLL removal steps)
Search and unregister these DLLs:
There are no dll's.

To locate the DLL path, go to Start > Search > All Files or Folders. Type MonaRonaDona and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
Once you have the DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister).
To unregister MonaRonaDona registry keys (view registry keys removal steps)
Go to Start > Run > type regedit > press OK.
Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
Search and delete these registry keys:
MICROSOFT\WINDOWS\CURRENTVERSION\RUN
If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
Remove MonaRonaDona Directories.
To find infection directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.
Search and delete the following directories:
There are no directories.

Right-click on the named folder and select Delete.
A message will appear saying ‘Are you sure you want to remove the selected folder and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting a folder could make some programs not work. Are you sure you want to do this?’, click Yes.
To remove MonaRonaDona icons on your Desktop, drag and drop them to the Recycle Bin.

You’ve completed the manual removal instructions!
I hope this article has helped you solve your problems. If you want to contribute to this article, post your comment below.

Disclaimer