A new Trojan horse is serving as a moral guard of sorts, displaying text from the Koran if users visit what could be a pornographic Web site, Sophos warned on Monday.
The Trojan horse, dubbed "Yusufali-A," scans the title bar of the active Web browser window, which typically contains the name of a Web site. The program jumps into action when it sees any one of nine terms, including sex, teen, xxx, penis and exhibitionism, Sophos said in a description of the Trojan on its Web site.
When it determines that a pornographic Web site is being shown, the Trojan minimizes that window and displays a message from the Koran instead, Sophos said. If the offending site is not closed, a button labeled "For Exit Click Here" will appear. Moving the mouse to that box will lock it in and the user is forced to log out of Windows, according to Sophos.
http://news.com.com/Trojan+swaps+por...3-5851679.html