FANDOM


Hurr-Durr was a joke website with a trojan (executable) which infected Microsoft Windows by exploiting browser vulnerabilities. It worked with Internet Explorer, Firefox, and Chrome. It did not harm the user's computer, but it could get annoying. As of 2017, the website no longer works.

Origin

"Hurr" or "Hurr Durr" is a word/series of words used to mock something that is subpar, unintelligent or unentertaining, or alternatively, to express sarcastic laughter.

Payload

Website

When the website is visited, it displays an animated image of a dancing bulldog and plays an audio file, and the browser window begins to move randomly. This functionality only works on Internet Explorer and may not work on other browsers. Whenever a user attempts to close the tab or window, it generates a constant dialog box, which prevents the browser from being closed. This is very similar to the "You Are An Idiotvirus, being that it doesn't harm the system, instead aggravating the user.

Since the site does not block Task Manager or Alt+F4, it is easy to close the browser by using Task Manager, unlike "You Are An Idiot".

Hurr-Durr's payload may not work on browsers other than Internet Explorer: if the user attempts to visit the website on Microsoft Edge, attempting to close the tab or the window will result in a hang, so if other tabs are open, the tab will freeze for about 5 seconds, then it will close; on Firefox, the window will also hang, and the only way to stop this is to end Firefox's task in Task Manager.

Executable

HurrDurr

HurrDurr.exe Windows Trojan

The executable version is made by TechologicalByte (Gigabyte_Forever), and it shares some payloads from MEMZ, PCToaster and the Sasser worm. It attempts to open the Hurr-Durr Website and many other applications. After that, it tries to delete System32 and the registry, and then tries to terminate "lsass.exe" to reboot the computer after a minute. After a reboot, Windows will fail to start due to deleted files and registry entries. This is only recoverable if a user restores their PC with a Windows Image or reinstalls the operating system.

Removal Process

Internet Explorer: Open Task Manager, navigate to details (if running Windows 8, onward) or processes (if running Windows 2000 onward to 7), then find the process iexplore.exe and terminate the process.

Chrome/Firefox: Simply click the Close button on your browser.

Microsoft Edge: When you close the tab with Hurr-Durr it usually takes a while for the tab or browser window to close.

External links

Saberceleration, Y F., Know Your Meme, Hurr-Durr. 2011

Hurr-Durr virus (website version) in action with Microsoft Edge