The Symantec site cites a few more names this worm goes by:
Also known as: VBS/Loveletter.ed,
VBS/Loveletter.Gen, VBS_SPAMMER,
VBS.Loveletter.FW.A
Does anyone still use Outlook Express??
Trudy
> Neshoba wrote:
>
> This was posted to another list ...
>
> From CNET VIRUS ALERT
>
> There's a new virus in town, and it makes ILOVEYOU look like a genuine
> mash
> note. Where ILOVEYOU erased .jpg files and hid .mp3 files, the newest
> variant (named VBS.NewLove.A) will delete all files on your computer
> not in
> use and replace them with copies of itself. Where ILOVEYOU was
> instantly
> recognizable to anyone who knew about it, this new worm changes both
> the
> subject line of the email sent and the name of the attachment.
>
> So what does it have in common with ILOVEYOU? It preys on the exact
> same
> vulnerabilities, and only Windows users who have Outlook can be
> infected.
> The worm is a Visual Basic file that perpetuates itself through the
> Outlook
> address book. Therefore, preventing infection is similar to ILOVEYOU.
>
> ****Prevention****
> Immediately back up your entire system. If you become infected,
> restoring
> your entire system from backup is the only cure.
>
> If you receive any emails with FW: in the subject lines, do not open
> any
> attachments.
>
> Do not open any email attachments that end in .vbs. In fact, never
> open .vbs
> attachments. As a stopgap measure, install VBProtect , a utility that
> will
> warn you before you attempt to open any VBS attachment:
>
> http://2.digital.cnet.com/cgi-bin2/flo?x=dAouumAuouwBABKuY
>
> To prevent further infection, download the latest definition sets for
> your
> antivirus software. Norton AntiVirus users, click here:
>
> http://2.digital.cnet.com/cgi-bin2/flo?x=dAouumAuouwBABBuh
>
> ****How the VBS.NewLove.A Worm works****
> When the worm infects your system, it deletes all files not in use and
> creates copies of itself in their place. A file named report.doc will
> be
> replaced with a copy of the virus named report.doc.vbs.
>
> The worm sends copies of itself to everyone in your Outlook address
> book. It
> chooses a random file and uses that name for the attachment and email
> subject. For example, if it chooses song.mp3, it will send an email
> titled
> "FW: song.mp3" with an attachment named song.mp3.vbs.
>
> For a complete technical description of the virus, check out
> Symantec's
> virus description page, here:
>
> http://2.digital.cnet.com/cgi-bin2/flo?x=dAouumAuouwBABmuK
--
**********************************
'Click' to protect the rainforest:
Make the Rainforest Site your homepage!
http://www.therainforestsite.com/
**********************************
------------------------------------------------------
RecOzNet2 has a page @ http://www.green.net.au/recoznet2 and is archived at
http://www.mail-archive.com/
To unsubscribe from this list, mail [EMAIL PROTECTED], and in the body
of the message, include the words: unsubscribe announce or click here
mailto:[EMAIL PROTECTED]?Body=unsubscribe%20announce
This posting is provided to the individual members of this group without permission
from the
copyright owner for purposes of criticism, comment, scholarship and research under
the "fair
use" provisions of the Federal copyright laws and it may not be distributed further
without
permission of the copyright owner, except for "fair use."
RecOzNet2 is archived for members @
http://www.mail-archive.com/recoznet2%40paradigm4.com.au/
