Re: heads up:VBS.LoveLetter.A virus

From: Martin Ling (martin@nodezero.org.uk)
Date: Fri May 05 2000 - 19:11:13 MDT


On Fri, May 05, 2000 at 01:50:43PM -0700, White, Ryan wrote:
> I would like to see this.
>
> My network was infected. We downloaded and ran the latest McAfee updates,
> yet still today I come into the office and I observe that all of the .jpg
> files, on my file server, where nobody has used outlook for over a year,
> have been rewritten as .vbs files. Do you have any insight?

Yes, this is one of its effects.

Attatched is a copy of the original message (as plain text of the RFC822
mail file - your mailreader may understand this so don't open the
attatchment inside it :-)

Also included is an analysis of the program.

Martin

-- 
+--------------------------------------------------------+
| Martin J. Ling              Tel: +44 (0)20 8863 2948   |
| martin@nodezero.org.uk      Fax: +44 (0)20 8248 4025   |
| http://www.nodezero.org.uk  Mobile: +44 (0)7940 482675 |
+--------------------------------------------------------+





This archive was generated by hypermail 2b29 : Thu Jul 27 2000 - 14:10:33 MDT