Internet trojan interrupts porn-surfing with Quran verses

Adem Al-Albani · 09-08-2005, 08:58 AM

rabic Trojan butts into porn surfing
Yusufali-A interrupts adult websites with messages from the Koran

Robert Jaques, vnunet.com 05 Sep 2005
ADVERTISEMENT
Security experts today issued a warning after detecting a malicious Trojan horse which tries to interrupt the surfing of adult websites by displaying messages from the Koran.

The Yusufali-A Trojan monitors users' surfing habits by examining the title bar of the active window.

If the Trojan finds a key word such as 'teen', 'xx', 'sex' or 'penis', it minimises the window so that the user cannot see its content and displays a message from the Koran instead.

The message, which is partly written in Arabic, contains the following English text: "Yusufali: Know, therefore, that there is no god but Allah, and ask forgiveness for they fault, and for the men and women who believe: for Allah knows how ye move about and how ye dwell in your homes."

Graham Cluley, senior technology consultant at Sophos, said: "Unlike other malware, it appears that this Trojan isn't trying to steal money or confidential information, but acts as a moral guardian instead, blocking the viewing of websites it determines as unsavoury.

"Of course, it's possible for the Trojan to make mistakes and block sites that are not pornographic, such as medical sites or social sites designed for teenagers."

Yusufali-A continues to display messages if the offending website remains open, and after a while displays a button labelled 'For Exit Click Here'.

As soon as the mouse is moved the box changes to show vertical bars and the text 'OH! NO i'm in the Cage'.

The box contains LogOff, ShutDown and Restart buttons and the mouse pointer is locked within the confines of the box. All the buttons actually cause the computer to logout.

"This Trojan may have been written as a joke, or as a serious attempt to clean up the habits of internet users," said Cluley.

"Whatever the reasons behind its creation, computer users should protect their systems with up-to-date antivirus software, security patches and a proper firewall."

Permalink for this story | View trackbacks to this story

Trackback URL: http://www.itweek.co.uk/actions/trackback/2141861

*taken from another forum. "www.mpadc.com"

Helper · 09-08-2005, 09:46 AM

I gotta send this to a few people, any idea where i can get this from?

Abu Dujanah · 09-08-2005, 12:18 PM

Mashallah, may Allah reward them.

Khadijah~UmmZakariyyah · 09-08-2005, 01:24 PM

Quote:

Security experts today issued a warning after detecting a malicious Trojan horse which tries to interrupt the surfing of adult websites by displaying messages from the Koran.

malicious indeed.

NaseehaMan · 09-08-2005, 01:48 PM

Where's the link to this article? I gots to send it to everyone.

talibatun ul ilm · 09-08-2005, 10:19 PM

mashallah! i wish more people used their skills like that! thats fantastic!

Abu Muqatil · 09-11-2005, 08:55 PM

ikhwatee fillaah we all abhor pornography but the above mentioned way to tackle it could be considered very irresponsible and could be regarded as violating the principles of hisbah as described by another brother:

Quote:

This trojan is bad because it’s an unwarranted invasion of someone else’s machine. That, on its own, is bad enough, but there’s another reason why this is bad: there is this program lurking in your computer, which assumes the very worst about you. If you even mention something which is remotely related to pornography, it pops up and accuses you. This is the same reason why I hate those right-click blockers some web masters use. The right click has a number of perfectly legitimate uses, and what they are trying to block (the copying and pasting of their article, usually into a mass email) has another route to accomplishment, namely the “Edit” menu at the top of the window or screen. The quoting of short extracts in a comment on the article, which is “fair use”, is also accomplished with the same two methods. The blocker can’t distinguish the two, until someone writes some program to block long, or repeated, copying.

But, you click the right mouse button to move back to the last page, and that message pops up telling you to fear Allah and that copying is haraam. And that’s the same thing this wretched program does: it assumes you’re a pervert just because you mention porn, or the words “teen” or “penis” or perhaps a few other words. Even though you might be talking about spam on your blog, or your fertility problem, or something else totally innocent.

Whoever wrote this no doubt based it heavily on someone else’s work (there are well-known to be “virus writing kits” for people who know where to find them). There’s no justification for it, not least because it will affect far more legitimate activity than immorality.

And Allah knows best.

heartsofgreenbirds · 09-15-2005, 05:43 PM

more information found here...

http://www.sophos.com/virusinfo/articles/yusufali.html

***daniel aljughaifi*** · 09-17-2005, 06:30 PM

I think thats the first trojan that you wanna have mashaAllah.
No need looking for it walhumdulillah, we here at Islamic Network have the browser comming out(inshaAllah) so that you can knock out any nasty sites!

Helper · 09-17-2005, 07:13 PM

its easier to send ppl the trojan then to get them to download a browser, especially when I.E is impossible to completely remove.

09-08-2005, 08:58 AM	#1
Adem Al-Albani You think I care? Join Date: Jun 2004 Posts: 917 My Mood: Gender:	Internet trojan interrupts porn-surfing with Quran verses rabic Trojan butts into porn surfing Yusufali-A interrupts adult websites with messages from the Koran Robert Jaques, vnunet.com 05 Sep 2005 ADVERTISEMENT Security experts today issued a warning after detecting a malicious Trojan horse which tries to interrupt the surfing of adult websites by displaying messages from the Koran. The Yusufali-A Trojan monitors users' surfing habits by examining the title bar of the active window. If the Trojan finds a key word such as 'teen', 'xx', 'sex' or 'penis', it minimises the window so that the user cannot see its content and displays a message from the Koran instead. The message, which is partly written in Arabic, contains the following English text: "Yusufali: Know, therefore, that there is no god but Allah, and ask forgiveness for they fault, and for the men and women who believe: for Allah knows how ye move about and how ye dwell in your homes." Graham Cluley, senior technology consultant at Sophos, said: "Unlike other malware, it appears that this Trojan isn't trying to steal money or confidential information, but acts as a moral guardian instead, blocking the viewing of websites it determines as unsavoury. "Of course, it's possible for the Trojan to make mistakes and block sites that are not pornographic, such as medical sites or social sites designed for teenagers." Yusufali-A continues to display messages if the offending website remains open, and after a while displays a button labelled 'For Exit Click Here'. As soon as the mouse is moved the box changes to show vertical bars and the text 'OH! NO i'm in the Cage'. The box contains LogOff, ShutDown and Restart buttons and the mouse pointer is locked within the confines of the box. All the buttons actually cause the computer to logout. "This Trojan may have been written as a joke, or as a serious attempt to clean up the habits of internet users," said Cluley. "Whatever the reasons behind its creation, computer users should protect their systems with up-to-date antivirus software, security patches and a proper firewall." Permalink for this story \| View trackbacks to this story Trackback URL: http://www.itweek.co.uk/actions/trackback/2141861 *taken from another forum. "www.mpadc.com" __________________ Jus chillin. Yes Yes.

09-08-2005, 09:46 AM	#2
Helper I need $60,000... :( Join Date: Aug 2004 Location: not far from you Posts: 1,768 My Mood: Gender:	I gotta send this to a few people, any idea where i can get this from? __________________ Helper's Corner Yasir Hamed Jeddah Unlimited

09-08-2005, 01:48 PM	#5
NaseehaMan What should I put here? Join Date: Jun 2004 Posts: 1,235 Gender:	Where's the link to this article? I gots to send it to everyone. __________________ My New Blog on Puglu!: http://puglu.com/naseehaman/ My weekly comics (updated every Monday): The Blunderous Adventures of NaseehaMan

09-15-2005, 05:43 PM	#8
heartsofgreenbirds Senior Member Join Date: Nov 2004 Posts: 1,573 Gender:	.. more information found here... http://www.sophos.com/virusinfo/articles/yusufali.html __________________ ارواح الشهداء في حواصل طير خضر تسرح في الجنة حيث شاءت The souls of the martyrs are in the hearts of green birds; they fly about in paradise wherever they wish. http://heartsofgreenbirds.wordpress.com/

09-17-2005, 06:30 PM	#9
*daniel aljughaifi* النجدي الوهابي Join Date: Aug 2005 Location: "the land" 17:103 Posts: 536 Gender:	I think thats the first trojan that you wanna have mashaAllah. No need looking for it walhumdulillah, we here at Islamic Network have the browser comming out(inshaAllah) so that you can knock out any nasty sites! __________________ "There is nothing on the face of the earth that is more in need of being imprisoned for a lenghty period of time than the tongue" Abdullah Ibn Mas'ood "The one who is in love is a slave to the one he loves" Sheikhul Islam Ibnu Taymiyyah Unite and Conquer Daniel Al-Jughaifi's Blog

09-08-2005, 12:18 PM	#3
Abu Dujanah ad-Dandani Join Date: Jun 2004 Posts: 844 Gender:	Mashallah, may Allah reward them.

09-08-2005, 10:19 PM	#6
talibatun ul ilm Member Join Date: Jun 2004 Posts: 423 Gender:	mashallah! i wish more people used their skills like that! thats fantastic!

09-17-2005, 07:13 PM	#10
Helper I need $60,000... :( Join Date: Aug 2004 Location: not far from you Posts: 1,768 My Mood: Gender:	its easier to send ppl the trojan then to get them to download a browser, especially when I.E is impossible to completely remove. __________________ Helper's Corner Yasir Hamed Jeddah Unlimited

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Cageprisoners Publishes Quran Desecration Report	Abu Dujanah	Current Affairs	4	05-22-2005 05:49 PM
"They urinated over it (the Qur'an)..."	cageprisoners	Current Affairs	0	05-21-2005 01:24 PM
Reciting Qur'aan during menses	Catalyst	Knowledge of Qur'an and Sunnah	8	04-28-2005 01:27 PM
The golden rules for the memorisation of the Quran	Editor	Qur'an Memorization	1	03-06-2005 04:36 PM
Ht	Sara	Corner Table	4	11-20-2004 06:18 PM