Computer Crime Research Center


Islamic Porn Trojan

Date: September 07, 2005
Source: Sophos

Experts at SophosLabs™, Sophos's global network of virus and spam analysis centers, have warned users about a Trojan horse which tries to interrupt surfing of adult websites by displaying messages from the Koran.

The Yusufali-A Trojan horse monitors which websites Windows users are visiting by examining the title bar of the active window. If the Trojan finds a word it doesn't like (such as "teen", "xx", "sex" or "penis") it minimizes the window so the user cannot see its content and displays a message from the Koran instead.

"Unlike other malware, it appears this Trojan horse isn't trying to steal money or confidential information, but acting as a moral guardian instead - blocking viewing of websites it determines are unsavory," said Graham Cluley, senior technology consultant for Sophos. "Of course, it's possible for the Trojan horse to make mistakes and block sites which are not pornographic - such as medical sites, or social sites designed for teenagers."

The Yusufali-A Trojan horse continues to display messages if the offending website remains open, and after a while it displays a button labelled "For Exit Click Here". As soon as the mouse is moved the box changes to have vertical bars and the text 'OH! NO i'm in the Cage'. The box contains LogOff, ShutDown and Restart buttons and the mouse pointer is locked within the confines of the box. All the buttons actually cause the computer to logout.
Original article

Add comment  Email to a Friend

Discussion is closed - view comments archieve
2006-06-10 14:08:46 - this is stupid..entire muslim nation waste... stupid
2005-11-01 00:08:55 - Good Ahmed
2005-10-06 05:19:26 - this is lessen pornography on... ayen
2005-09-17 15:53:39 - Your blog is realy very interesting. Sofia
Total 4 comments
Copyright © 2001-2013 Computer Crime Research Center
CCRC logo