From: Maurice A. O'Sullivan (mauros@iol.ie)
Date: Tue May 23 2000 - 19:25:30 EDT
<x-flowed>At 21:54 23/05/00, Jim West wrote:
>Called VBS/Newlove.a, the virus is rated as a HIGH-risk worm.
>
Indeed it is, Jim -- and one of the dangers is that the name of the
attachment is no longer a fixed one about which everyone can be made aware,
but is randomly named.
As the Norton AV centre points out:
>>The VBS.NewLove.A is a worm, and spreads by sending itself to
all addresses in the Outlook address book when it is activated.
The attachment name is randomly chosen, but will always have a
.Vbs extension. The subject header will begin with "FW: "
and will
include the name of the randomly chosen attachment (excluding
the .VBS extension) Upon each infection, the worm introduces up
to 10 new lines of randomly generated comments in order to
prevent detection. <<
And if ever there was a case for doing regular back-ups it is now,
>>Since this worm overwrites all
files regardless of extension, proper removal can only be
achieved by restoring the affected files from known clean
backups. The user may need to reinstall the operating system as
well since system files may have been destroyed. >>>
Full details available at:
http://www.symantec.com/avcenter/venc/data/vbs.loveletter.fw.a.html
Regards
Maurice
Maurice A. O'Sullivan [ Bray, Ireland ]
mauros@iol.ie
---
B-Greek home page: http://sunsite.unc.edu/bgreek
You are currently subscribed to b-greek as: [jwrobie@mindspring.com]
To unsubscribe, forward this message to leave-b-greek-327Q@franklin.oit.unc.edu
To subscribe, send a message to subscribe-b-greek@franklin.oit.unc.edu
</x-flowed>
This archive was generated by hypermail 2.1.4 : Sat Apr 20 2002 - 15:36:26 EDT