another virus at large- take seriously

Maurice A. O'Sullivan mauros at iol.ie
Tue May 23 19:25:30 EDT 2000


At 21:54 23/05/00, Jim West wrote:
>Called VBS/Newlove.a, the virus is rated as a HIGH-risk worm.
>
Indeed it is, Jim -- and one of the dangers is that the name of the 
attachment is no longer a fixed one about which everyone can be made aware, 
but is randomly named.
As the Norton AV centre points out:
 >>The VBS.NewLove.A is a worm, and spreads by sending itself to
                all addresses in the Outlook address book when it is activated.
                The attachment name is randomly chosen, but will always have a
                .Vbs extension. The subject header will begin with "FW: " 
and will
                include the name of the randomly chosen attachment (excluding
                the .VBS extension) Upon each infection, the worm introduces up
                to 10 new lines of randomly generated comments in order to
                prevent detection. <<

And if ever there was a case for doing regular back-ups it is now,
 >>Since this worm overwrites all
                files regardless of extension, proper removal can only be
                achieved by restoring the affected files from known clean
                backups. The user may need to reinstall the operating system as
                well since system files may have been destroyed. >>>

Full details available at:
http://www.symantec.com/avcenter/venc/data/vbs.loveletter.fw.a.html

Regards
Maurice


Maurice A. O'Sullivan  [ Bray, Ireland ]
mauros at iol.ie






More information about the B-Greek mailing list