Hello everyone, and as you can probably tell from the title of this video, today we are
taking a look at the 'YouAreAnIdiot' Trojan. Now this is probably the most
requested piece of malware that I've ever had on this channel, with literally
hundreds of people requesting it over the past seven or so years that I've
been doing this, and I've heard many outrageous claims of the damage it can
do from completely destroying your hard drive to wiping your BIOS, and I'm here
to tell you today that it doesn't do any of those things. It is a very simple
JavaScript trojan that is designed to annoy you. So we'll look at the Flash that you're
probably familiar with (if you're familiar with this piece of malware)
YouAreAnIdiot.org just plays the Flash in a browser window. It doesn't
do anything tricky, you can go back, even close your browser; everything's fine.
However, if you go to a page with the original JavaScript on it,
which I have a copy of on my site here, we will see the exploit that it uses and what it does to
your computer. So when we run it, we can see that the site is now bouncing around our desktop,
it is going nuts.
and if we click... It goes a little faster, that might be a byproduct of the virtual machine, it's just
virtualization speed... But we'll see if we can close it here, hitting Ctrl and Alt and F4 at times will...
There you go. It thought we tried to close it, so it spawned many more windows,
hitting Ctrl+Alt+Delete sometimes pops up a window-- there we go-- 'You are an idiot'
as it tries to prevent me from closing them,
and as you try to close them it spawns more windows.
This is... pretty much it,
This trojan does not wipe your hard drive, it does not delete files, it doesn't drop itself to your C:\ drive.
It exists on the Internet, and spawns windows.
And that's pretty much it. As we Alt-F4, we get many more windows popping up,
It gets very loud, so I mean, you might go deaf,
I mean, that might be a problem to worry about,
but, nothing physically is going to happen to your computer.
Nothing digitally is going to happen to your computer, as this goes away after you restart.
It's plausible for the trojan to be...
I can't get to the restart button.
But it will be plausible...
for this to be... rewritten so that it might contain an exploit, something similar to that,
but...
As it stands, the original variant here does not do any of that.
Simply spawns windows, and annoys you, and when we restart it goes away.
Alright, I think we hit restart. We'll see if it'll actually restart.
It's definitely trying to, but it's kinda failing...
There we go. I like that this is going nuts.
I took my headphones off, because this is really loud on my end.
It's much quieter in the video, but this is really loud. And it won't stop... Holy crap.
Look at it go!
That is insane.
Can we... can we please restart?
I can't even click anymore.
Uh, uhp... there we go. Yes, I wanna close.
Alright, we're just gonna hard reset, and I'm gonna prove you that nothing happened to this virtual machine.
Oh yeah, one cool thing I found out about OBS is that if you record the inner window of
the virtual machine and then restart, when it goes into a lower resolution,
you can draw on the black part.
Alright, there we go.
Ok, and as we can see, we booted into Windows just fine.
Nothing's wrong here.
Everything is fine.
None of your files are deleted, you can...
look at your hard drive, your Windows directory is fine,
nothing's been dropped, nothing runs on startup, and while there may have been some variants that change
your homepage to the web page or something similar,
nothing like that happens here with the original one, so that is about it for the
YouAreAnIdiot trojan, thank you for watching, I hope it was informative
Please leave any hate you may have for me messing up this video in the comments below.
Thank you for watching.