From: K Garrison (Kathryn.Garrison@Colorado.EDU)
Date: 05/05/00-10:14:27 AM Z
In brief (since I don't want to start any more threads on this)
There are several variants of the LoveLetter virus that we all may see in
the next few days/weeks:
>Round two of the virus attacks is about to begin people! DO NOT
>OPEN ATTACHMENTS IF YOU ARE NOT EXPECTING ONE!
>This press release comes from F-Secure.
>By midday (central European time) on Friday, five different versions of the
>VBS/LoveLetter worm had been found in the wild. Several more are excepted to
>appear over the coming weekend.
>version E
>"The e-mail appears to be a confirmation of an order for 'Mother's Day diamond
>special', and the attached file mothersday.vbs is portrayed as if it were an
>invoice.
>The other known variants of the worm are known as VBS/LoveLetter.A, B, C and
>D.
>The A variant was the original LoveLetter worm.
>The B variant has been modified in Lithuania, and the subject field of the
>sent e-mail messages is "Susitikim shi vakara kavos puodukui...", which in
>Lithuanian means "Let's meet this evening for a cup of coffee..."
>The C variant has the subject field of "fwd: Joke" and the attachment is
>called "Very Funny.vbs"
>The D variant is almost identical to the original LoveLetter worm. It has
>been modified slightly, probably to make it undetectable to some anti-virus
>programs.
>
>A technical description of the worm is available in the F-Secure virus
>description database at: http://www.F-Secure.com/v-descs/love.htm
Kathryn Garrison
This archive was generated by hypermail 2b29 : 06/13/00-03:10:17 PM Z CST