Sorry if this is off topic, but if it saves anyone it is worth it.
There is a new strain of the love virus called VBS.NewLove.A. This one is
vicious. Here is the write up from Norton.
Mark
Technical description:
This polymorphic Loveletter variant will overwrite ALL files that are not
currently in use regardless of extension. It arrives as an email message
with a subject of "FW: FILENAME.EXT" and an attachment named
"FILENAME.EXT.VBS" (where FILENAME.EXT is derived from the infected user's
recently opened documents list.) The body of the email is empty. If no
documents have been used recently, this name is randomly generated. If the
message has been generated by a system running Windows NT or Windows 2000,
then the filename will be omitted and the subject of the message will be
"FW: .EXT" and the attachment name will be ".EXT.VBS" (again, the file
extension will vary depending on the recently opened documents list of
infected machines.)
Removal:
The contents of all files will be deleted, leaving the affected files with a
byte length of zero. The worm will also append the extension '.vbs' to each
of these files. For example, the file calc.exe will become calc.exe.vbs.
Since this worm overwrites all files regardless of extension, proper removal
can only be achieved by restoring the affected files from known clean
backups.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
