JS.Fortnight нь Outlook Express -ын signature тохиргоонд халдварладаг Trojan
horse юм. Халдварласан компьютераас имэйл илгээх тоолонд уг вирус хамт илгээгддэг
байна. Мєн Internet Explorer болон Netscape Navigator-ын Home Page-ыг єєрчилж
, тухайн броузер программыг нээгдэх vед rawtocash.net гэсэн сайт руу хєтєлдєг

Тєрєл : Trojan horse , worm
Илэрсэн он сар єдєр : 2002.5.15
Хор хохирол учруулах зэрэг : 1
Хор хохирол : Outlook Express-ын тохиргоог єєрчилж, хамгаалалтыг сул
болгоно. Internet Explorer болон Netscape Navigator -ын Start хуудсанд порно
материалуудыг оруулна.
Хэмжээ: 2735 эсвэл 206 байт

JS.Fortnight нь идэвхжиж эхлээд дараах vйлдлvvдийг хийнэ.
1. C:\Program Files фолдерт Sign.htm гэсэн нэртэй уг Trojan-ыг агуулах файл
vvсгэнэ. Sign.htm нь .html файл бєгєєд rawtocash.net вэб сайт руу хєтлєх линкийг
агуулсан байна. Ингэснээр уг Trojan Outlook Express-ын signature тохиргоонд
Sign.html файлыг оруулж єгдєг.
2. Дээрх vйлдлийг хийхийн тулд HKEY_CURRENT_USER\Identities\[Default User ID]\Software\Microsoft\Outlook
Express\5.0\signatures\ регистрт
Default Signature 10101010 гэсэн утгыг оруулж єгнє.
3. Їvнээс гадна доорх регистрvvдэд єєрчлєлт ордог байна.
HKEY_CURRENT_USER\Identities\[Default User ID]\Software\Microsoft\Outlook Express\5.0\signatures\10101010
регистрт file c:\Program Files\sign.htm утга, HKEY_CURRENT_USER\Identities\[Default
User ID]\Software\Microsoft\Outlook Express\5.0\ регистрт
Signature Flags 3 гэсэн утга нэмж єгнє.
4. Internet Explorer болон Netscape Navigator -ын Start Page-ыг єєрчлєхийн тулд
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\ регистрт Start
Page http://www.rawtocash.net/adv/sex.htm гэсэн утга нэмж єгнє.
5. Internet броузерын Favorites -д
SEXXX. Totaly Teen http:/ /www.rawtocash.net/adv
Make BIG Money http:/ /www.rawtocash.net
6544 Search Engines Submission http:/ /www.rawtocash.net/submit зэрэг линкvvдийг
нэмж єгнє.

Хэрхэн арилгах вэ?
Арилгахын тулд эхлээд тухайн вирусаар халдварласан файлуудыг устгах, регистрт
хийсэн єєрчлєлтийг арилгах шаардлагатай .
Устгахдаа :
1. Хамгийн сvvлийн vеийн update хийгдсэн вирусын эсрэг программтай эсэхээ шалгах
2. Norton Antivirus-аар системийг бvхэлд нь scan хийж шалгах шаардлагатай.
3. JS.Fortnight – аар халдварлагдсан бvх файлыг устгах хэрэгтэй.

Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 2,757

2,757 Responses to JS.Fortnight

    Hello there, simply was aware of your blog thru Google, and found that it’s really informative. I am gonna be careful for brussels. I will be grateful in the event you proceed this in future. A lot of other people shall be benefited from your writing. Cheers!|

    Hello There. I found your blog using msn. This is a very well written article. I’ll be sure to bookmark it and return to read more of your useful information. Thanks for the post. I will definitely return.|

    Fine way of describing, and fastidious paragraph to get data about my presentation subject, which i am going to convey in college.|

    I love looking through an article that can make people think. Also, thank you for allowing for me to comment!

    An fascinating dialogue is price comment. I believe that you need to write extra on this subject, it might not be a taboo topic however generally persons are not sufficient to talk on such topics. To the next. Cheers

    I really like reading a post that will make people think. Also, thank you for allowing for me to comment!


    generic tadalafil: tadalafil 20mg – tadalafil online
    ventolin tab 4mg

    Hello there! This post couldnít be written much better! Going through this article reminds me of my previous roommate! He continually kept talking about this. I’ll send this article to him. Fairly certain he will have a great read. Thanks for sharing!

    If you want to obtain much from this paragraph then you have to apply these methods to your won webpage.|

    I’ll right away grab your rss feed as I can’t to find your email subscription link or newsletter service. Do you have any? Kindly allow me understand so that I could subscribe. Thanks.|

    Excellent article. I absolutely love this website. Continue the good work!

    I believe this site holds some very fantastic information for everyone. “The penalty of success is to be bored by the attentions of people who formerly snubbed you.” by Mary Wilson Little.

    Wow, wonderful blog layout! How long have you been blogging for? you make blogging look easy. The overall look of your web site is fantastic, as well as the content!


    90 mcg ventolin: ventolin inhalers for sale – ventolin 50 mcg
    ventolin 2mg

    You are so cool! I do not believe I’ve read through something like that before. So nice to find someone with original thoughts on this issue. Seriously.. many thanks for starting this up. This web site is one thing that is needed on the web, someone with a bit of originality!|

    Hi to every body, it’s my first pay a quick visit of this weblog; this webpage consists of amazing and in fact fine data in support of visitors.|

    Please let me know if you’re looking for a writer for your blog. You have some really great posts and I believe I would be a good asset. If you ever want to take some of the load off, I’d absolutely love to write some material for your blog in exchange for a link back to mine. Please blast me an email if interested. Cheers!|

    You made some good points there. I looked on the web for more info about the issue and found most individuals will go along with your views on this website.|

    I truly love your blog.. Very nice colors & theme. Did you build this amazing site yourself? Please reply back as Iím planning to create my very own website and want to know where you got this from or exactly what the theme is called. Thanks!

    I wanted to thank you for this good read!! I absolutely loved every little bit of it. I have got you book marked to look at new things you postÖ

    Have you ever considered writing an e-book or guest authoring on other websites? I have a blog centered on the same information you discuss and would really like to have you share some stories/information. I know my audience would value your work. If you are even remotely interested, feel free to send me an e-mail.|

    Hello there, just became alert to your blog through Google, and found that it’s truly informative. I’m gonna watch out for brussels. I’ll appreciate if you continue this in future. Numerous people will be benefited from your writing. Cheers!|


    can you buy valtrex over the counter in usa: valtrex buy – valtrex 500 cost
    ventolin 70

    Spot on with this write-up, I actually believe this amazing site needs a great deal more attention. I’ll probably be back again to read through more, thanks for the info!

    I really appreciate this post. I have been looking everywhere for this! Thank goodness I found it on Bing. You’ve made my day! Thanks again

    You are a very capable person!

    My developer is trying to persuade me to move to .net from PHP. I have always disliked the idea because of the expenses. But he’s tryiong none the less. I’ve been using Movable-type on a variety of websites for about a year and am worried about switching to another platform. I have heard excellent things about blogengine.net. Is there a way I can import all my wordpress posts into it? Any kind of help would be greatly appreciated!

    Woah! I’m really enjoying the template/theme of this site. It’s simple, yet effective. A lot of times it’s tough to get that “perfect balance” between superb usability and visual appearance. I must say you’ve done a superb job with this. In addition, the blog loads very fast for me on Firefox. Outstanding Blog!

    Wonderful blog! I found it while surfing around on Yahoo News. Do you have any suggestions on how to get listed in Yahoo News? I’ve been trying for a while but I never seem to get there! Many thanks|

    Its like you learn my mind! You appear to grasp so much approximately this, like you wrote the e book in it or something. I believe that you can do with a few percent to pressure the message house a little bit, but other than that, this is excellent blog. A fantastic read. I’ll definitely be back.

    Excellent beat ! I wish to apprentice while you amend your site, how can i subscribe for a blog web site? The account helped me a applicable deal. I were a little bit acquainted of this your broadcast offered vivid clear idea|

    Appreciating the commitment you put into your site and in depth information you provide. It’s great to come across a blog every once in a while that isn’t the same out of date rehashed material. Wonderful read! I’ve bookmarked your site and I’m adding your RSS feeds to my Google account.|


    propeciaforlesscom: buy finasteride – generic for propecia
    ventolin hfa

    Its such as you learn my thoughts! You seem to know so much about this, like you wrote the e-book in it or something. I feel that you just can do with some p.c. to force the message home a bit, but other than that, that is great blog. An excellent read. I will definitely be back.

    I do not know if it’s just me or if perhaps everybody else encountering issues with your blog. It seems like some of the text on your content are running off the screen. Can someone else please provide feedback and let me know if this is happening to them too? This could be a issue with my internet browser because I’ve had this happen previously. Many thanks|

    Neat blog! Is your theme custom made or did you download it from somewhere? A design like yours with a few simple tweeks would really make my blog jump out. Please let me know where you got your design. Thanks a lot|

    My programmer is trying to persuade me to move to .net from PHP. I have always disliked the idea because of the expenses. But he’s tryiong none the less. I’ve been using WordPress on a number of websites for about a year and am nervous about switching to another platform. I have heard great things about blogengine.net. Is there a way I can import all my wordpress content into it? Any help would be really appreciated!


    generic for valtrex: valtrex price south africa – valtrex 500mg uk
    order ventolin online

    Thank you for the auspicious writeup. It actually was a amusement account it. Look advanced to far introduced agreeable from you! However, how can we keep up a correspondence?|

    Hello to every , because I am really eager of reading this blog’s post to be updated regularly. It carries good material.|

    I am not sure where you’re getting your information, but good topic. I needs to spend some time learning much more or understanding more. Thanks for magnificent information I was looking for this information for my mission.|


    generic valtrex 1000mg for sale: valtrex cream prescription – purchase generic valtrex online
    ventolin usa over the counter

    Hello, I check your blog like every week. Your humoristic style is witty, keep up the good work!|

    Great post. I will be facing some of these issues as well..

    definitely an interesting read. i usually dont comment. signed dentistry

    Very good post. I definitely appreciate this website. Thanks!

Leave a Reply