PDA

View Full Version : maybe off topic


badgers
05/04/2000, 08:13 AM
ok this is very off topic but I want to tell you people about a email virus that is real.How do I know? it has shut down our email system and it appears that some friends have also had problems. the email has an attachment with a VBS extension.
The subject line I got was "I Love You"
we were told that it only infects your system when you open the attachment.
It appears that it opens you address book and sends copies of itself. It does not appear to do any harm other then loads of traffic.
HTH
I know for a fact that this is not a hoax.
I guess I won't check email notification :)

Agu
05/04/2000, 08:20 AM
I just got a call from our computer dept not to open the same email,but to delete it if received.

ReefDad
05/04/2000, 08:20 AM
Yeah, our email system here at work is down too - I had 37 messages in my inbox.

They took it off line until they can clean out the messages.

Our IS dept. told us that after the attachment sends itself to everyone in your address book, it disables your system so that you can't re-boot! Nasty! :mad: Definitely just delete the email if you get it.

Q-ball
05/04/2000, 08:28 AM
Yep, this one's for real, here's an article on cnn that I read this morning before I even saw your posts: http://www.cnn.com/2000/TECH/computing/05/04/computer.lovebug.ap/index.html
bummer...

Q

------------------
Reality is merely a short-lived perception, make of it what you will.

alde
05/04/2000, 08:34 AM
I got it here at work too.

al

------------------
He who feared he would not succeed sat still.

[This message has been edited by alde (edited 05-04-2000).]

Q-ball
05/04/2000, 09:02 AM
well, someone here got it & opened it too...does anyone know if this is an "Outlook-only" type virus, or will it affect all email proggys? We use Lotus notes here, and although she opened the email, it didn't crash her system. We're trying to find out now if it forwarded the virus to her address book.

Q

------------------
Reality is merely a short-lived perception, make of it what you will.

Doug
05/04/2000, 09:13 AM
Hi Everyone,

It is true, I have already had a few at my office get it this morning. We are waiting for the virus scan updates now. We are not sure what the impact is yet though.

It's no fun being an MIS Director. :( Stuff like this makes me hate my job even more.

Doug

------------------
Doug's Reef and Fish Page (http://38.222.244.200/dougw)

Q-ball
05/04/2000, 09:17 AM
here's some info I got on the virus from one a gaming BB that I use:
Just got word of this WORM and it can be pretty nasty specially if you use Outlook.

Technical description:

This is a preliminary writeup. The information contained within is
to provide as much information as possible at this time.

VBS.LoveLetter.A is an email worm, mIRC worm, and a file
infector. VBS.LoveLetter.A will use Microsoft Outlook and email
itself out as an attachment with the above subject line and
attachment name. The body of the message will be

kindly check the attached LOVELETTER coming from me.

The virus will also infect files with the following extensions: vbs,
vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp3, and mp2

The virus will drop the following files:

MSKernel32.vbs in the Windows System directory
Win32DLL.vbs in the Windows directory
LOVE-LETTER-FOR-YOU.TXT.vbs in the Windows System
directory
WinFAT32.EXE in the Internet download directory
WIN-BUGSFIX.EXE in the Internet download directory
script.ini in the mIRC directory

SARC recommends Administrators filter on the attachment name
and Subject line immediately.

------------------
Reality is merely a short-lived perception, make of it what you will.

badgers
05/04/2000, 09:50 AM
it appears that you need a current version of vbscript.dll on your machine.
A person here at work had version 3.1.0 and the attachment would not run. when he tried to open the file it gave him an error and his files appear to be unaffected.
I was mistaken in regards to this virus. It appears to do more damage then I thought.
I hope all the logo submissions are safe :eek:

Dave
05/04/2000, 08:15 PM
They say stock in McAfee and Symantec went up today. Go figure

horge
05/05/2000, 11:14 PM
Ah well, when we get our hands on this felon...

JamesB
05/06/2000, 06:43 AM
This sounds like something Dark Horge would do. The FBI thinks this started in the Phillipines, ya know!

James - return address withheld by request.

Joez
05/06/2000, 09:11 AM
Thanks for the tip badgers!

Hey Horge, Philippine prisons are pretty posh aren't they ( ;) ?

Larry M
05/06/2000, 09:20 AM
I can't even get to McAfee to download the new anti-virus file. :(

------------------
Larry M

See my tanks at Northern Reef (http://www.reefcentral.com/northernreef/index.htm)

dark horge
05/07/2000, 07:30 PM
Joez:
Beware the Dark Side! Muhuhuhuahahahahaha!!!

Larry:
I could send the vba file to you.
Ohhhhhh..... you mean the ANTI-virus update! :D :D
Oh well.

ReefDad
05/08/2000, 08:46 AM
FYI,
There's a new strain of this virus coming now:

That strain has the subject line "Mother's Day Order Confirmation," with text that states the recipient's credit card has been charged $326.92 for a Mother's Day diamond special. The e-mail urges the recipient to examine the attached invoice carefully and save it. Once the fictional invoice is opened, the virus is in motion again.

badgers
05/08/2000, 10:24 AM
If you disable the VB scripting on your machine then you will not have to worry about minor variations of this virus.
PS they are trying to arrest the persons involved.
an article I read indicated that the Philippines does not have any laws making this a crime. But don't worry the arrogant US will try to impose its standards and laws on all lesser countries. :eek:
It appears there are now 13 variants to this virus.
thank you for your time and have a good day

badgers
05/09/2000, 02:21 PM
I have a joke to share
this is a male virus,
first it says it loves you
and then it scr*ws you and
then tries to scr*w your friends.
:)

Joez
05/09/2000, 02:41 PM
Death to the Great Satan!