Description
VBS/LoveLetter.worm arrives via email message with one of three subject lines:
"ILOVEYOU"
"Susitikim shi vakara kavos puodukui..."
"Joke"
The text reads "kindly check the attached LOVELETTER coming from me.", and the worm is included in the attachment, called "LOVE-LETTER-FOR-YOU.TXT.vbs" or "VeryFunny.vbs".
This worm attempts to send copies of itself through mIRC to the IRC channels and through Outlook to all address book entries.
VBS/LoveLetter.worm also attempts to download and install an executable file called WIN-BUGSFIX.EXE, a password stealing program that will email any cached passwords it finds to the mail address MAILME@SUPER.NET.PH.
[This message has been edited by c&c1913 (edited May 05, 2000).]
|