JS.Fortnight

JS.Fortnight is a Trojan horse that drops a file that is then inserted into the default signature for Outlook Express. Every time the infected computer sends an email message, the message will contain code that will attempt to visit a specific Web site.

JS.Fortnight also changes the Internet Explorer and Netscape Navigator Home Page to go to rawtocash.net sites when the browser is opened. It also adds some rawtocash.net Web sites to Favorites.

Protection

• Initial Rapid Release version May 15, 2002
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version May 15, 2002
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date May 15, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low