Home / malware

PDF

Joke:Win32/Crazywindow.A

First posted on 06 January 2012.
Source: Microsoft

Aliases :

Joke:Win32/Crazywindow.A is also known as Trojan.Win32.Generic.12ACA946 (Rising AV), Win32/BadJoke.O trojan (ESET), Trojan.Agent.ATOX (BitDefender).

Explanation :

Joke:Win32/Crazywindow.A is a joke program that, when run, opens a Christmas-themed window and plays a Christmas tune, then takes control of the active window and shakes it for nearly a minute at a time.


Top

Joke:Win32/Crazywindow.A is a joke program that, when run, opens a Christmas-themed window and plays a Christmas tune, then takes control of the active window and shakes it for nearly a minute at a time.

is present on the computer, the following icon will display:



When run, Joke:Win32/Crazywindow.A will play an mp3 file named "jingle bells.mp3", and display the following interface:



If the user clicks the "Let's GO!" button displayed by the joke, the current active window will shake for 50 seconds then stop.

Once the active window stops shaking, a message will display asking the user "Do you want to quit?" If the user clicks "OK", the window will shake for a further 50 seconds.



Once the active window has stopped shaking, a message will display that says "No way!". On clicking "OK", the user can successfully close this window.



After the second round of shaking, the user can close the joke window.



Analysis by Xinrui Qin

Last update 06 January 2012

 

TOP