Summary
Summary
Action- More Information
| Included in our products from | June 2000 (3.34) |
|---|---|
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please read the instructions for removing worms.
More Information
VBS/LoveLet-G is a variant of VBS/LoveLet worm.
It is very similar to VBS/LoveLet-A.
Note: Due to the generic scanning methods used by SAV, this worm may be detected in files infected with other VBS/LoveLet variants, such as:
| From | <user> |
|---|---|
| Subject | ILOVEYOU |
| Body | kindly check the attached LOVELETTER coming from me |
| Attachment | LOVE-LETTER-FOR-YOU.TXT.vbs |
| Extensions targeted | vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3 |
| Files dropped | MSKernel32.vbs, Win32DLL.vbs, LOVE-LETTER-FOR-YOU.TXT.vbs, script.ini, LOVE-LETTER-FOR-YOU.HTM |
| From | <user> |
| Subject | Thank You For Flying Arab Airlines |
| Body | Please check if the bill is correct, by opening the attached file |
| Attachment | ArabAir.TXT.vbs |
| Extensions targeted | vbs, vbe, js, jse, css, wsh, sct, hta, dll, sys, exe |
| Files dropped | MSKernel32.vbs, Win32DLL.vbs, ArabAir.TXT.vbs, script.ini, no-hate-FOR-YOU.HTM |
| From | <user> |
| Subject | Bewerbung Kreolina |
| Body | Sehr geehrte Damen und Herren! |
| Attachment | BEWERBUNG.TXT.vbs |
| Extensions targeted | js, jse, css, wsh, sct, hta, jpg, jpeg, mp3, mp2 |
| Files dropped | MSKernel32.vbs, Win32DLL.vbs, BEWERBUNG.TXT.vbs, script.ini |
| From | <user> |
| Subject | LOOK! |
| Body | he he ... check this out |
| Attachment | LOOK.vbs |
| Extensions targeted | vbs, vbe, js, jse, css, wsh, sct, hta, xls, mdb, lnk, exe |
| Files dropped | MSUser32.vbs, User32DLL.vbs, LOOK.vbs, script.ini |
| From | <user> |
| Subject | Variant Test |
| Body | This is a variant to the vbs worm |
| Attachment | IMPORTANT.TXT.vbs |
| Extensions targeted | vbs, vbe, mpg, mpeg, avi, qt, qtm |
| Files dropped | sndvol32.vbs, IEAKDLL.vbs, IMPORTANT.TXT.vbs, script.ini |
| From | <user> |
| Subject | I Cant Believe This!!! |
| Body | I Cant Believe I Have Just Recieved This Hate Email ... Take A Look! |
| Attachment | KillEmAll.TXT.vbs |
| Extensions targeted | js, jse, css, wsh, sct, hta, gif, bmp, wav, mid |
| Files dropped | killer1.vbs, killer2.vbs, KillEmAll.TXT.vbs |
| From | <user> |
| Subject | PresenteUOL |
| Body | O UOL tem um grande presente para voce, e eh exclusivo. Veja o arquivo e |
| Attachment | UOL.TXT.vbs |
| Extensions targeted | vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp3, mp2, exe, com, in |
| Files dropped | MSKernel32.vbs, Win32DLL.vbs, UOL.TXT.vbs, script.ini, UOL.HTM |
![[TOP]](/images/arrowtop.gif){kind=small}
|
