Virex: Trojan Horses

This article discusses Trojan Horses.
A Trojan Horse is a destructive program that has been disguised (or concealed in) an harmless piece of software. Trojan Horses are not viruses because they do not reproduce themselves and spread as viruses do.

The mythical story of the original Trojan Horse is well known. Greek warriors concealed themselves in an attractive wooden horse and left it outside the gates of the besieged city of Troy. The Trojans assumed it was a friendly peace offering and took it in. The Greek warriors then came out and wreaked havoc.

Trojan Horse software works on the same principle. A program may seem attractive and innocent. It invites the computer user to copy (or download) the software and run it. Trojan Horses might be games or some other tempting software.

To protect your computer, Virex detects Trojan horses so you can delete them from your computer.

Some well known Trojan horses

ChinaTalk
The ChinaTalk Trojan horse is an INIT/extension that disguises itself as a ìfemale MacinTalk sound driver.î Upon system restart, after ChinaTalk has been installed, the Trojan horse erases the directories of the hard drives and floppy disks on the infected system.

CPro
The CPro Trojan horse was found in a file named CPro141.sea. To infect, CPro disguises itself as an update to a popular compression program. After a user launches the CPro application, the Trojan horse tries to format mounted hard disks and floppy disks, with internal floppy-disk drives being especially susceptible. CPro is only successful, however, in its attempts at formatting floppy-disk drives.

Fontfinder
The Fontfinder Trojan horse masquerades as a legitimate utility program called Fontfinder, but when launched destroys the directory of your hard drive and make the files on the drive inaccessible.

MacMag
The MacMag Trojan horse, also known as the Peace Trojan horse, masquerades as a product called New Apple Products. When it is launched, it generates the Peace Virus.

Mosaic
The Mosaic Trojan horse masquerades as a utility program which claims to paint pictures. When launched, it destroys the directory of your hard drive, making the files inaccessible.

NVP
When launched, the NVP (No Vowel Prank) Trojan horse modifies the currently active System file to keep the letters "a, e, i, o, u" from being entered from the keyboard. This Trojan horse started out as a prank called "No Vowels II", but has been distributed under other names without the means to reverse changes to the System file.  The NVP Trojan horse and its infection of the System file does not attempt to spread to other files.  Virex detects and removes the NVP Trojan horse, as well as clean affected System files.

Steroid
The Steroid Trojan horse masquerades as a game, but destroys the directory of your hard drive when launched.

SubSeven
Originally the chronic scourge of Windows users, the SubSeven Trojan has entered the world of Macintosh. The hacker group, Team2600 released a new version of SubSeven that targets Mac OS, making Apple systems vulnerable to remote takeover. At a 2001 DefCon convention in Las Vegas, the hacker group announced it had ported the Trojan to the Mac environment as a "remote-control utility based on the SubSeven protocol."

Tetricycle
The Tetricycle Trojan horse was originally discovered in Wales and masquerades as a game called Tetricycle. When the Tetricycle Trojan horse is launched, it infects System, Finder and application files with the MBDF virus (see MBDF A Virus). Users have reported experiencing long delays after launching the Tetricycle program and even System file damage if the computer is restarted while Tetricycle is running.

Virus Info
The Virus Info Trojan horse masquerades as a utility program. It claims to provide virus information, but when launched, destroys the directory of your hard drive and make the files on the drive inaccessible.

This information and more can be found at http://virexhelp.com/

Published Date: Feb 18, 2012