Yusufali-A Trojan Worm Censors Adult Surfing with Koran Verses   9/6/2005 - 1,256 views, 2 Comments

Summary: Yusufali-A is a new trojan worm which censors web sites by minimizing your browser window and displaying a verse from the Koran which includes the phrase "Yusufali: Know, therefore, that there is no god but Allah, and ask forgiveness for they fault, and for the men and women who believe"

Previous Article « Free Tivo After Rebate!
Read Next Article » CarChip and TeenArriveAlive - Monitor Your Child’s Driving Remotely

Yusufali-A is a new Trojan worm which is a bit unusual. Yusufali A pops up a verse from the Koran whenever the infected machine web surfs to a site with offensive content. Yusufali-A also blocks the offensive content from view by minimizing the browser window at the same time as it pops up the Yusufali verse.

Yusufali A apparently determines whether a site is “offensive” by comparing the words in the title of the page against its own list of offensive words, and if it finds one of the words it pops up its Yusufali verse.

The Koran verse it displays is partly in Arabic, and also includes some verse in English, which says “Yusufali: Know, therefore, that there is no god but Allah, and ask forgiveness for they fault, and for the men and women who believe: for Allah knows how ye move about and how ye dwell in your homes.”

If the offending web page is not closed, eventually Yusufali-A traps the mouse pointer in a box on the screen, and the only way to exit is to log out.

Said Graham Cluely of Sophos, “Unlike other malware, it appears that this Trojan isn’t trying to steal money or confidential information, but acts as a moral guardian instead, blocking the viewing of websites it determines as unsavoury. Of course, it’s possible for the Trojan to make mistakes and block sites that are not pornographic, such as medical sites or social sites designed for teenagers.”

“Whatever the reasons behind its creation, computer users should protect their systems with up-to-date antivirus software, security patches and a proper firewall,” he added

Get FREE email alerts of new Internet Patrol stories!
    *We never share your email address with anyone

Email Address:
Date of first visit:
How you found us:

Subscribe
to The Internet Patrol on your cell phone    Email the link for this page to a friend!

Read more:

»  Beware of Anonymous Email Online Postcards

»  New Kirvo Trojan Worm Sidekick Targetting AOL AIM and MSN Instant Messenger

»  Newest AIM Opanki Worm says “LOL Look at Him”

»  How Many Worms Do You Think Are Out There?

For additional similar stories check out our archives on Around the World, Over 18, Worms

 

2 Comments »

  1. let shaitan take the soul of this worm writer to sheol to be the plaything of demons and the sport of ifrits until the end of time. may he never know aught but hunger and thirst all the days of his miserable life. may his wives be barren of sons that his name dies and is forgotten on the earth and may his daughters all lie with infidels. may all he sets his hand to become as ashes and dust blown upon the wind and may his grave become the abode of the unclean animal and his bones be soaked in their urine forever. this curse i lay upon him in the names of all gods, to dog his steps while he lives and follow him beyond the grave.

    Comment by ichi ban cheap charlie — 9/14/2005 @ 2:53 am

  2. Yeah, riiight. That’ll stop the virus writers! Heh. Sorry, had to comment. I’m aethiest myself, but seriuosly, if religous faith works for someone else, then good on them.

    Comment by Anonymous — 9/29/2005 @ 10:06 am

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


We apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day!

 
The Internet Patrol
Patrolling the Internet for You!