another virus at large- take seriously
Maurice A. O'Sullivan
mauros at iol.ie
Tue May 23 19:25:30 EDT 2000
At 21:54 23/05/00, Jim West wrote:
>Called VBS/Newlove.a, the virus is rated as a HIGH-risk worm.
>
Indeed it is, Jim -- and one of the dangers is that the name of the
attachment is no longer a fixed one about which everyone can be made aware,
but is randomly named.
As the Norton AV centre points out:
>>The VBS.NewLove.A is a worm, and spreads by sending itself to
all addresses in the Outlook address book when it is activated.
The attachment name is randomly chosen, but will always have a
.Vbs extension. The subject header will begin with "FW: "
and will
include the name of the randomly chosen attachment (excluding
the .VBS extension) Upon each infection, the worm introduces up
to 10 new lines of randomly generated comments in order to
prevent detection. <<
And if ever there was a case for doing regular back-ups it is now,
>>Since this worm overwrites all
files regardless of extension, proper removal can only be
achieved by restoring the affected files from known clean
backups. The user may need to reinstall the operating system as
well since system files may have been destroyed. >>>
Full details available at:
http://www.symantec.com/avcenter/venc/data/vbs.loveletter.fw.a.html
Regards
Maurice
Maurice A. O'Sullivan [ Bray, Ireland ]
mauros at iol.ie
More information about the B-Greek
mailing list