RE: heads up:VBS.LoveLetter.A virus

From: White, Ryan (ryan@dvelco.com)
Date: Fri May 05 2000 - 14:50:43 MDT


I would like to see this.

My network was infected. We downloaded and ran the latest McAfee updates,
yet still today I come into the office and I observe that all of the .jpg
files, on my file server, where nobody has used outlook for over a year,
have been rewritten as .vbs files. Do you have any insight?

        -----Original Message-----
        From: Martin Ling [SMTP:martin@nodezero.org.uk]
        Sent: Friday, May 05, 2000 7:41 AM
        To: extropians@extropy.com
        Subject: Re: heads up:VBS.LoveLetter.A virus

        On Fri, May 05, 2000 at 07:32:39AM -0400, Matt Gingell wrote:
> There are more creative ways to do this stuff - like, instead of
> sending out copies of yourself with the same dopey title, pick
entries
> from the inbox and reply to them or resend items from sentmail.
And
> send out children titled with variations on: 'how to protect
yourself
> against the I-Love-You virus.'
>
> The vbscript source for this thing was posted on Slashdot, so look
> there if you're curious how these things work. It's very simple,
and
> it's a very effective demonstration of how the scripting in
Outlook
> can be exploited.

        I have a full copy of the first-generation message. I can post it
(in
        'castrated' form or otherwise) to anyone who requests.

        Martin

        --
        +--------------------------------------------------------+
        | Martin J. Ling Tel: +44 (0)20 8863 2948 |
        | martin@nodezero.org.uk Fax: +44 (0)20 8248 4025 |
        | http://www.nodezero.org.uk Mobile: +44 (0)7940 482675 |
        +--------------------------------------------------------+



This archive was generated by hypermail 2b29 : Thu Jul 27 2000 - 14:10:32 MDT