The Channel logo


By | John Leyden 17th May 2006 11:57

Killjoy Trojan deletes warez and smut

Vigilante malware

Virus writers have created a Trojan that deletes illicit files from compromised Windows PCs in addition to harvesting data from infected machines.

Erazer-A is spreading (albeit modestly) across P2P networks, where it poses as useful program files, or through chat programs.

If executed, the malware scours folders used for P2P apps for AVI, MP3, MPEG, WMV, GIF, ZIP and other files. It then erases any porn, warez, music or any other matching file type found in P2P directories before dropping copies of itself (using names such as names such as game.exe, goporn.exe, nero7.exe and officexpcrack.exe) in the shared folders of peer-to-peer (P2P) applications.

Erazer-A also turns off security applications running on the compromised machine. More information on the malware, and how to defend against it, can be found in an analysis by UK-based anti-virus firm Sophos here. ®

alert Send corrections


Frank Jennings

What do you do? Use manual typwriters or live in a Scottish croft? Our man advises
A rusty petrol pump at an abandoned gas station. Pic by Silvia B. Jakiello via shutterstock

Trevor Pott

Among other things, Active Directory needs an overhaul
Baby looks taken aback/shocked/affronted. Photo by Shutterstock

Kat Hall

Plans for 2 million FTTP connections in next four years 'not enough'
Microsoft CEO Satya Nadella


League of gentlemen poster - Tubbs and Edward at the local shop. Copyright BBC
One reselling man tells his tale of woe