Re: another virus at large- take seriously

From: Maurice A. O'Sullivan (
Date: Tue May 23 2000 - 19:25:30 EDT

<x-flowed>At 21:54 23/05/00, Jim West wrote:
>Called VBS/Newlove.a, the virus is rated as a HIGH-risk worm.
Indeed it is, Jim -- and one of the dangers is that the name of the
attachment is no longer a fixed one about which everyone can be made aware,
but is randomly named.
As the Norton AV centre points out:
>>The VBS.NewLove.A is a worm, and spreads by sending itself to
                all addresses in the Outlook address book when it is activated.
                The attachment name is randomly chosen, but will always have a
                .Vbs extension. The subject header will begin with "FW: "
and will
                include the name of the randomly chosen attachment (excluding
                the .VBS extension) Upon each infection, the worm introduces up
                to 10 new lines of randomly generated comments in order to
                prevent detection. <<

And if ever there was a case for doing regular back-ups it is now,
>>Since this worm overwrites all
                files regardless of extension, proper removal can only be
                achieved by restoring the affected files from known clean
                backups. The user may need to reinstall the operating system as
                well since system files may have been destroyed. >>>

Full details available at:


Maurice A. O'Sullivan [ Bray, Ireland ]

B-Greek home page:
You are currently subscribed to b-greek as: []
To unsubscribe, forward this message to
To subscribe, send a message to


This archive was generated by hypermail 2.1.4 : Sat Apr 20 2002 - 15:36:26 EDT