ADSM-L

Re: ILOVEYOU

2000-05-04 11:33:38
Subject: Re: ILOVEYOU
From: Lori Metcalf <lmetcalf AT US.IBM DOT COM>
Date: Thu, 4 May 2000 10:33:38 -0500
FYI:

I/T Notice

Summary:  Urgent Virus Alert -- New, Fast Spreading Virus VBS.LOVELETTER.A

Audience: All users


What You Need To Know:

Virus Alert - VBS.LOVELETTER.A

   Vulnerability:    E-mail Attachments with
        Subject:          VBS.LOVELETTER.A
        Body:        kindly check the attached LOVELETTER coming from me
        Attachment Name:       VBS.LOVELETTER.A


   Threat Summary:   The virus has 3 payloads:

        The first will attempt to use Microsoft Outlook to e-mail a copy of
        the infected document to addresses from Outlook Address Book

        The second will drop the following files:

             MSKernel32.vbs in the Windows System directory

             Win32DLL.vbs in the Windows System directory

             LOVE-LETTER-FOR-YOU.TXT.vbs in the Windows System directory
             WinFAT32.EXE in the Internet download directory
             WIN-BUGSFIX.EXE in the Internet download directory
             script.ini in the mIRC directory
        The third will infect files with the following extensions:
          .vbs
          .vbe
          .js
          .jse
          .css
          .wsh
          .sct
          .hta
          .sct
          .hta
          .jpg
          .jpeg
          .mp3
          .mp2

          Lori Metcalf,  AFS/DFS Support
          IBMUSM07/RCHVMX2
          Dept 77N, Bldg 20-3 a218
          IBM Global Services SDC North, Rochester MN
          Phone 1-507-253-0722  T/L 1-507-553-0722
          Internet address: lmetcalf AT us.ibm DOT com
<Prev in Thread] Current Thread [Next in Thread>