PDA

View Full Version : WARNING: LOVE LETTER VARIANT 18.05.00


blackadder
19th May 2000, 17:31
VBS.NewLove.A

Last updated 5/18/00 5:34pm PST

SARC, in conjunction with other anti-virus vendors, has renamed
this worm from VBS.LoveLetter.FW.A to VBS.NewLove.A.

The VBS.NewLove.A is a worm, and spreads by sending itself to
all adressees in the Outlook address book when it is activated.
The attachment name is randomly chosen, but will always have a
.Vbs extension. The subject header will begin with "FW: " and will
include the name of the randomly chosen attachment (excluding
the .VBS extension) Upon each infection, the worm introduces up
to 10 new lines of randomly generated comments in order to
prevent detection.

Also known as: VBS/Loveletter.ed, VBS/Loveletter.Gen,
VBS_SPAMMER, VBS.Loveletter.FW.A

Category: Worm

Infection length: Variable

Virus definitions: 05/18/2000 (release time pending)

more here; http://www.sarc.com/avcenter/venc/data/vbs.loveletter.fw.a.html

Rollingthunder
19th May 2000, 17:38
This one decimates your hard drive.
The document names will vary each time & will be from someone you know.
Don't open if it's a .vbs

Snigs
19th May 2000, 17:53
blackie, I've duplicated a little bit with a post in R&N with ***VIRUS ALERT**** New "Love Bug" (http://www.pprune.org/ubb/NonCGI/Forum1/HTML/007970.html), so I'll wait to be told off.

This one's even more of a bugger!

MAX REVERSE
19th May 2000, 18:09
The latest version of ZoneAlarm provides some protection againss .vbs scripts in emails. Just a thought.

blackadder
27th May 2000, 09:10
last reminder.

Seaman Staines
10th Jun 2000, 10:20
Just what does a .vbs script look like pls?