Needy.I is a Java applet based trojan that changes the
Internet Explorer start page, changes search settings to
ones contained in the trojan and writes shortcuts to pornographic
services to users Internet Explorer link favorites.
The Needy.I is activated when a web site containing the
trojan is loaded with unpacthed Microsoft Internet Explorer
browser. When the JAR file containing the trojan is executed
it uses Microsoft Internet Explorer VerifierBug vulnerability to get
full privileges by escaping the Java security, and execute its
code.
When executed the trojan modifies the Internet Explorer start page
and search services to web search page, and writes shortcuts to pornographic
services to users Internet Explorer Favorites directory.