Trojan Deletes Your Por$, Music & Ware$

dipdude

Forerunner
"The new Trojan/Erazor-A has an interesting twist. In addition to deleting or disabling various security products and competing malware, it deletes any porn, warez and music in your P2P directories. While some opine that this trojan might have good intentions, remarkably few things infect the text files this trojan also deletes. No one yet knows who wrote this or why."

A "vigilante" Trojan, that attempts to protect infected PCs from the effects of malware caught while using peer-to-peer file-sharing networks, has been discovered.

The Windows Trojan/Erazer-A Trojan looks at default folders for downloading MP3, AVI, MPEG, WMV, Gif, Zip graphic and video files, and wipes anything it finds with these extensions in the target locations.

The assumption is that because the Trojan is only deleting certain file types in specific download directories used by P2P programs -- one of the main sources of inadvertent malware infection -- it is attempting to protect those it manages to infect.

The catch is that the program also attempts to subvert certain security programs to aid its activities, which opens the user to a more general risk of infection or program instability. It also appears to steal information.

The company that first uncovered it spreading among its customers, Sophos, has dubbed it as a "vigilante" Trojan, making it an extremely rare type of malware that could have some beneficial effects.

"The Erazer Trojan is a vigilante worthy of a Charles Bronson movie, taking the law into its own hands. However, it's perfectly possible for the Trojan to aim poorly and wipe out innocent files too," commented Graham Cluley of Sophos.
PC World | Vigilante Trojan attacks other malware
Slashdot | Trojan Deletes Your Porn, Music & Warez
 
^^A thick, tall wall.

But if you're stupid enough to open the main door just because you got a email " Hot animal $3X - Big Horse! ", then no one can help you.
 
Back
Top