Trojan.Norio

Trojan.Norio is a Trojan horse that modifies browser and network settings to direct you to pornographic Web sites. This Trojan horse changes the default Explorer home page and search pages by modifying the registry.

The worm includes a component that can download and execute arbitrary code on your computer.

---

Note: At the time of this writing, this Trojan uses the file names, Winupdate.exe and Lookupsys.exe, in the Windows folder.

---

Protection

• Initial Rapid Release version September 4, 2003
• Latest Rapid Release version March 24, 2008 revision 036
• Initial Daily Certified version September 4, 2003
• Latest Daily Certified version March 24, 2008 revision 039
• Initial Weekly Certified release date September 4, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 50 - 999
• Number of Sites: 3 - 9
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Difficult

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Low