x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Monagun

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Monagun
Technical name:Trj/Monagun
Threat level:Low
Type:Trojan
Effects:   It allows to get into the affected computer. It does not spread automatically using its own means.
Affected platforms:

Windows ME/98/95

Detection updated on:May 5, 2007
StatisticsNo

Brief Description 

    
Trojan/MonaGun is a Trojan horse that permits malicious users to gain remote access to the infected computer from any other computer. It permits a client-server type connection that the users are unable to appreciate.

Due to this, the Trojan is capable of permitting remote access to a computer from any other machine at the same time making it possible for the remote machine to take control of the infected computer.

Visible Symptoms 

    

When the file that contains the Trojan is executed, it displays a window that allows users to run two different programs.



It is interesting to note that on placing the mouse pointer on the icons, a brief description of the programs is displayed, as can be seen below.

The explanation of the GUN.EXE program will be the following:



This program is known as GUN and it was designed by Celtech Software. This application is similar to a screen saver and it displays bullet holes in the position where the mouse pointer is located whenever the right button is pressed. To disable this program, users must press the Ctrl-Alt-Supr key combination and then end the task with the following name: "Gun - Celtech Software".

The explanation of the MONA.EXE application will be the following:



This program displays a picture of La Mona Lisa by Leonardo Da Vinci and it was designed by Plastic Swinner Productions in 1993. When the space key is pressed, an animation will be displayed.

While this window is being displayed on the screen, the BAT program that contains the Trojan is in charge of deleting system files, among which the following could be highlighted:

CONFIG.SYS, LOGOS.SYS, MSDOS.SYS and AUTOEXEC.BAT.

After carrying out this action, the Trojan displays the following window: