From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Fwd: Virus Alert: ""NewLove"" Worm Date: 25 May 2000 20:00:27 -0700 ------- Start of forwarded message ------- From: CNET Virus Alert Dispatch <[EMAIL PROTECTED]> Date: Thu, 18 May 2000 22:59:09 -0400 (EDT) There's a new virus in town, and it makes ILOVEYOU look like a genuine mash note. Where ILOVEYOU erased .jpg files and hid .mp3 files, the newest variant (named VBS.NewLove.A) will delete all files on your computer not in use and replace them with copies of itself. Where ILOVEYOU was instantly recognizable to anyone who knew about it, this new worm changes both the subject line of the email sent and the name of the attachment. So what does it have in common with ILOVEYOU? It preys on the exact same vulnerabilities, and only Windows users who have Outlook can be infected. The worm is a Visual Basic file that perpetuates itself through the Outlook address book. Therefore, preventing infection is similar to ILOVEYOU. ****Prevention**** Immediately back up your entire system. If you become infected, restoring your entire system from backup is the only cure. If you receive any emails with FW: in the subject lines, do not open any attachments. Do not open any email attachments that end in .vbs. In fact, never open .vbs attachments. As a stopgap measure, install VBProtect , a utility that will warn you before you attempt to open any VBS attachment: http://2.digital.cnet.com/cgi-bin2/flo?x=dAouAggghuwBABKuo To prevent further infection, download the latest definition sets for your antivirus software. Norton AntiVirus users, click here: http://2.digital.cnet.com/cgi-bin2/flo?x=dAouAggghuwBABBuY ****How the VBS.NewLove.A Worm works**** When the worm infects your system, it deletes all files not in use and creates copies of itself in their place. A file named report.doc will be replaced with a copy of the virus named report.doc.vbs. The worm sends copies of itself to everyone in your Outlook address book. It chooses a random file and uses that name for the attachment and email subject. For example, if it chooses song.mp3, it will send an email titled "FW: song.mp3" with an attachment named song.mp3.vbs. For a complete technical description of the virus, check out Symantec's virus description page, here: http://2.digital.cnet.com/cgi-bin2/flo?x=dAouAggghuwBABmuh ------- End of forwarded message ------- ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com * Gunadarma Mailing List ----------------------------------------------- * Archives : http://milis-archives.gunadarma.ac.id * Langganan : Kirim Email kosong ke [EMAIL PROTECTED] * Berhenti : Kirim Email kosong ke [EMAIL PROTECTED] * Administrator: [EMAIL PROTECTED]
