JS.Fortnight нь Outlook Express -ын signature тохиргоонд халдварладаг Trojan
horse юм. Халдварласан компьютераас имэйл илгээх тоолонд уг вирус хамт илгээгддэг
байна. Мєн Internet Explorer болон Netscape Navigator-ын Home Page-ыг єєрчилж
, тухайн броузер программыг нээгдэх vед rawtocash.net гэсэн сайт руу хєтєлдєг

Тєрєл : Trojan horse , worm
Илэрсэн он сар єдєр : 2002.5.15
Хор хохирол учруулах зэрэг : 1
Хор хохирол : Outlook Express-ын тохиргоог єєрчилж, хамгаалалтыг сул
болгоно. Internet Explorer болон Netscape Navigator -ын Start хуудсанд порно
материалуудыг оруулна.
Хэмжээ: 2735 эсвэл 206 байт

JS.Fortnight нь идэвхжиж эхлээд дараах vйлдлvvдийг хийнэ.
1. C:\Program Files фолдерт Sign.htm гэсэн нэртэй уг Trojan-ыг агуулах файл
vvсгэнэ. Sign.htm нь .html файл бєгєєд rawtocash.net вэб сайт руу хєтлєх линкийг
агуулсан байна. Ингэснээр уг Trojan Outlook Express-ын signature тохиргоонд
Sign.html файлыг оруулж єгдєг.
2. Дээрх vйлдлийг хийхийн тулд HKEY_CURRENT_USER\Identities\[Default User ID]\Software\Microsoft\Outlook
Express\5.0\signatures\ регистрт
Default Signature 10101010 гэсэн утгыг оруулж єгнє.
3. Їvнээс гадна доорх регистрvvдэд єєрчлєлт ордог байна.
HKEY_CURRENT_USER\Identities\[Default User ID]\Software\Microsoft\Outlook Express\5.0\signatures\10101010
регистрт file c:\Program Files\sign.htm утга, HKEY_CURRENT_USER\Identities\[Default
User ID]\Software\Microsoft\Outlook Express\5.0\ регистрт
Signature Flags 3 гэсэн утга нэмж єгнє.
4. Internet Explorer болон Netscape Navigator -ын Start Page-ыг єєрчлєхийн тулд
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\ регистрт Start
Page http://www.rawtocash.net/adv/sex.htm гэсэн утга нэмж єгнє.
5. Internet броузерын Favorites -д
SEXXX. Totaly Teen http:/ /www.rawtocash.net/adv
Make BIG Money http:/ /www.rawtocash.net
6544 Search Engines Submission http:/ /www.rawtocash.net/submit зэрэг линкvvдийг
нэмж єгнє.

Хэрхэн арилгах вэ?
Арилгахын тулд эхлээд тухайн вирусаар халдварласан файлуудыг устгах, регистрт
хийсэн єєрчлєлтийг арилгах шаардлагатай .
Устгахдаа :
1. Хамгийн сvvлийн vеийн update хийгдсэн вирусын эсрэг программтай эсэхээ шалгах
2. Norton Antivirus-аар системийг бvхэлд нь scan хийж шалгах шаардлагатай.
3. JS.Fortnight – аар халдварлагдсан бvх файлыг устгах хэрэгтэй.

Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 2,757

2,757 Responses to JS.Fortnight

    Hi my loved one! I wish to say that this article is awesome, great written and include approximately all significant infos. I would like to peer extra posts like this.

    obviously like your web site however you need to take a look at the spelling on quite a few of your posts. Several of them are rife with spelling problems and I to find it very bothersome to tell the reality nevertheless I’ll certainly come back again.

    Thank you for a wonderful in addition to informative post I truly appreciate all the effort that went into the creating.

    Hello there! This post couldn’t be written any better! Reading this post reminds me of my old room mate! He always kept chatting about this. I will forward this page to him. Fairly certain he will have a good read. Thank you for sharing!|

    Incredible quest there. What happened after? Thanks!|

    I visited several websites but the audio feature for audio songs existing at this web site is actually marvelous.|

    Thank a person so much intended for allowing me personally know what I didn’t know. I anticipate working with you.

    When I initially commented I seem to have clicked the -Notify me when new comments are added- checkbox and now whenever a comment is added I recieve 4 emails with the same comment. There has to be a way you are able to remove me from that service? Many thanks!


    https://clomidst.com/# where to buy clomid

    Today, I went to the beach front with my kids. I found a sea shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She placed the shell to her ear and screamed. There was a hermit crab inside and it pinched her ear. She never wants to go back! LoL I know this is entirely off topic but I had to tell someone!|

    Right now it appears like WordPress is the best blogging platform out there right now. (from what I’ve read) Is that what you are using on your blog?


    https://doxycyclinest.com/# doxycycline vibramycin

    What’s up to every body, it’s my first visit of this webpage; this weblog includes remarkable and really fine data for readers.|

    I used to be able to find good information from your articles.|


    https://amoxilst.com/# buy cheap amoxicillin

    If you desire to grow your know-how just keep visiting this website and be updated with the latest information posted here.|

    Thanks for the marvelous posting! I certainly enjoyed reading it, you may be a great author. I will remember to bookmark your blog and definitely will come back from now on. I want to encourage one to continue your great work, have a nice afternoon!

    One other issue is that if you are in a situation where you would not have a cosigner then you may genuinely wish to try to wear out all of your school funding options. You could find many grants or loans and other free college funding that will give you finances to help with education expenses. Thanks alot : ) for the post.

    I was reading some of your blog posts on this website and I conceive this web site is very informative! Keep on posting.

    Thanks for ones marvelous posting! I quite enjoyed reading it, you may be a great author. I will make sure to bookmark your blog and will come back down the road. I want to encourage that you continue your great job, have a nice holiday weekend!

    Hello. magnificent job. I did not expect this. This is a splendid story. Thanks!

    hi!,I love your writing so a lot! proportion we keep in touch more approximately your article on AOL? I require a specialist in this area to unravel my problem. Maybe that is you! Taking a look forward to look you.

    It’s awesome to pay a visit this web page and reading the views of all friends concerning this piece of writing, while I am also keen of getting know-how.|

    Thank you for the auspicious writeup. It in fact was a amusement account it. Look advanced to more added agreeable from you! By the way, how could we communicate?|

    Thanks a bunch for sharing this with all folks you really recognize what you’re talking about! Bookmarked. Please also consult with my website =). We may have a link trade contract among us|

    Everything is very open with a very clear explanation of the challenges. It was definitely informative. Your website is extremely helpful. Thank you for sharing!


    https://amoxilst.com/# generic amoxicillin online


    http://clomidst.com/# clomid treats

    Attractive section of content. I just stumbled upon your web site and in accession capital to assert that I get in fact enjoyed account your blog posts. Any way I’ll be subscribing to your feeds and even I achievement you access consistently fast.|

    Link exchange is nothing else however it is only placing the other person’s website link on your page at appropriate place and other person will also do same in favor of you.|

    Greetings! I’ve been following your website for some time now and finally got the courage to go ahead and give you a shout out from Austin Texas! Just wanted to mention keep up the good job!

    Thanks on your marvelous posting! I actually enjoyed reading it, you may be a great author. I will be sure to bookmark your blog and will eventually come back in the future. I want to encourage continue your great work, have a nice afternoon!

    I enjoy you because of all of your effort on this website. My mum delights in working on research and it’s really obvious why. Most of us learn all concerning the powerful form you convey reliable suggestions via your blog and strongly encourage contribution from other people about this content then my girl is without question studying a lot of things. Take pleasure in the rest of the new year. You are performing a fabulous job.

    Pretty! This was an incredibly wonderful article. Thanks for supplying this info.

    I got this web page from my buddy who told me about this website and now this time I am browsing this web page and reading very informative articles or reviews at this time.|

    Having read this I believed it was extremely enlightening. I appreciate you finding the time and effort to put this short article together. I once again find myself spending a lot of time both reading and posting comments. But so what, it was still worthwhile!|

    Aw, this was an extremely nice post. Spending some time and actual effort to create a superb articleÖ but what can I sayÖ I procrastinate a whole lot and never seem to get nearly anything done.


    http://clomidst.com/# purchase clomiphene

    Hello.This article was really fascinating, particularly because I was searching for thoughts on this matter last Saturday.

    One other issue is that if you are in a predicament where you would not have a co-signer then you may actually want to try to make use of all of your federal funding options. You’ll find many grants or loans and other grants that will present you with funds to aid with college expenses. Thanks alot : ) for the post.

    I’m gone to tell my little brother, that he should also go to see this website on regular basis to obtain updated from latest information.|

    This text is worth everyone’s attention. When can I find out more?|

    I am really impressed with your writing abilities as neatly as with the structure for your weblog. Is this a paid theme or did you customize it yourself? Either way keep up the nice high quality writing, it’s rare to look a nice weblog like this one today..|


    https://doxycyclinest.com/# vibramycin 100 mg

    You’re so awesome! I don’t think I’ve truly read through something like that before. So good to discover somebody with unique thoughts on this topic. Really.. thank you for starting this up. This web site is one thing that is needed on the internet, someone with a bit of originality!

    Hi there! I simply want to offer you a big thumbs up for the excellent information you’ve got here on this post. I will be coming back to your web site for more soon.|

Leave a Reply