It has hit the university of Kansas. There is a big warning on our homepage. Lookout everyone!!! I'm going to be using Telnet for my e-mail until Norton comes out with a fix...
Ryan
------------------
Tried to save myself but myself keeps slipping away...
Tried to save myself but my self keeps slipping away...
I-Worm.LoveLetter is a Visual Basic Script worm that is spreading through internet via an Microsoft Outlook e-mail message that reads as a chain letter . The worm uses the Outlook e-mail application to spread.
I-Worm.LoveLetter is also a overwriting Visual Basic Script virus, and
it can spread itself using mIRC client as well.
Technical Details:
When the worm is executed, it first copies itself to Windows System
directory as:
The worm replaces the Internet Explorer home page with a link to
an executable program, "WIN-BUGSFIX.exe" and creates a HTML file, "
LOVE-LETTER-FOR-YOU.HTM", to the Windows System directory.
I-Worm.LoveLetter will use Outlook to mail a copy of itself to everyone in each
address book.
The message will be addressed:
Subject: ILOVEYOU
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
The worm then searches for file with an extension of .jpeg, .mp3, .mp2,.jpg .js, .jse, .css, .wsh, .sct, and .hta on local and remote drives andoverwrites them with itself. Once overwritten the worm changes the extension of the overwritten files to .vbs or .vbe.
It killed our exchange server. Luckily I'm not MIS. We may be back up tomorrow. A few unsuspecting trainers and project managers opened it. I had 200 inbound copies of the message in my inbox when I got in. It also distributed to 200+ of our customers, because we have a global exchange group to send out broadcast messages to our customers. Ha Ha Ha!!
------------------
Nothing but the CHEESE!
UCU - United Chooches Uniontown for Life~~
--------------------
What is better, sit in the corner, and have people think you are stupid, or speak up, and prove them to be right??
--------------------
Finally... the CHEESEMAN... has LOST his 4x4!!! - My buddy wrecked it!
Whew, we got lucky on this one. One of our IT counterparts in Ireland phoned us first thing in the morning and warned us about it. We still had a couple of users open it, but we didn't have to shut down the Exchange Server.
_________________________"Give a man a fish and he will eat for a day,
Teach a man to fish and his wife will divorce
him, get the house, the kids, the boat, his rods
and reels, and he will learn to drink..."
No problem goff, and for everyone else, here's another heads up; some joker out there changed the subject line and file attachment, ie, a copy cat. IF YOU GET A EMAIL THAT SAYS 'JOKE', AND THE ATTACHED FILE IS 'VERY FUNNY', DO NOT OPEN IT!!! DELETE IT AT ONCE. This is coming second hand, from a NBC corespondence on my local am station. According to here, this just started going out this evening, so watch out.
my friend works at a large financial instute in NYC and thier whole sytem got hit in the AM..He said the tech guys ran out yelling for everyone to log out of the network...they lost a total of 3300 files...mostly MP3's and PIC files people have DLed on thier terminals...the guys there cleaned the network up in like 3 hrs...its so bad that on my friends workstation he had 200 peolple in his adress book and 150 E mails got sent out before he shut down..now most of these people on jis list r big business's..
Concerning that I LOVE YOU VIRUS: I'm working at SIEMENS in South Africa and that virus F*@#ked out our mail server totally! GOOD NEWS: except for the mail server, the only files this VIRUS corrupts are jpg's.Period.
The virus mailed that script to 1458, yes 1458 recipients in my mailbox ALLONE!!!
Cheers.
Was XP1700 now XP2200 Fop38
384Mb 266MHz CAS 2.5 RAM @ 286MHz CAS 2
Aopen HQ08 300W 448CFM
Epox 8khal+
Geforce4 4800SE
SB Live! Value
Deskstar 75GXP 30Gb
Seagate 80Gb
19" LG 995E
I came into work the other and all of a sudden I heard that there as a Love Bug virii flying around ppls outlook email box. Good thing we caught it in time. We told all our users to just delete them. But you know there were a few people that opened it. IDIOTS!!
Reply With Quote
Bookmarks