RE: heads up:VBS.LoveLetter.A virus

From: White, Ryan (
Date: Fri May 05 2000 - 14:50:43 MDT

I would like to see this.

My network was infected. We downloaded and ran the latest McAfee updates,
yet still today I come into the office and I observe that all of the .jpg
files, on my file server, where nobody has used outlook for over a year,
have been rewritten as .vbs files. Do you have any insight?

        -----Original Message-----
        From: Martin Ling []
        Sent: Friday, May 05, 2000 7:41 AM
        Subject: Re: heads up:VBS.LoveLetter.A virus

        On Fri, May 05, 2000 at 07:32:39AM -0400, Matt Gingell wrote:
> There are more creative ways to do this stuff - like, instead of
> sending out copies of yourself with the same dopey title, pick
> from the inbox and reply to them or resend items from sentmail.
> send out children titled with variations on: 'how to protect
> against the I-Love-You virus.'
> The vbscript source for this thing was posted on Slashdot, so look
> there if you're curious how these things work. It's very simple,
> it's a very effective demonstration of how the scripting in
> can be exploited.

        I have a full copy of the first-generation message. I can post it
        'castrated' form or otherwise) to anyone who requests.


        | Martin J. Ling Tel: +44 (0)20 8863 2948 |
        | Fax: +44 (0)20 8248 4025 |
        | Mobile: +44 (0)7940 482675 |

This archive was generated by hypermail 2b29 : Thu Jul 27 2000 - 14:10:32 MDT