1. Symantec/
  2. Security Response/
  3. JS.Xiro.Trojan


September 4, 2000
February 13, 2007 11:50:45 AM
Also Known As:
VBS/Xiro.A, Troj/JS-Ksys, JS.Trojan.ExitW, JS/Orixuss, JS_EXITWIN.A
Trojan Horse

JS.Xiro.Trojan is a short JScript Trojan. It was publicly posted to a virus source code newsgroup.

This script contains instructions to modify the registry and to rename the Internet Explorer browser title bar to "Orixuss."

The registry modification is an instruction that tells Windows to exit or shut down; it runs at Windows startup. The only way to bypass this would be to start Windows in Safe mode.

Antivirus Protection Dates

  • Initial Rapid Release version November 7, 2001
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version November 7, 2001
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Patrick Nolan
Summary| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube