Section: .. / loveletter /
|
All of the data contained herein is for use at your own risk. These tools and/or utilities along with documentation have been established to help people cope with the virus. A brief background: Much like Melissa, the Love Letter virus spread via e-mail messages bearing the title "I Love You" and spread through Asian businesses Thursday afternoon. It appeared to be quickly tainting computer systems world-wide. If the attachment holding the virus is opened, the virus apparently multiplies by finding other e-mail addresses and prompting the computer to generate new e-mail. Victims sometimes receive dozens of e-mail messages, all contaminated with the virus. As of May 5, there have been two other versions of the virus reported floating around in e-mails with the subjects "Susitikim" and "Joke".
|
| /// File Name: |
CA-2000-04.loveletter |
Description:
|
CA-2000-04 - The "Love Letter" worm is a malicious VBScript program which spreads in a variety of ways. As of 2:00pm EDT(GMT-4) May 4, 2000 -- the CERT Coordination Center has received reports from more than 250 individual sites indicating more than 300,000 individual systems are affected.
| | Author: | CERT | | Homepage: | http://www.cert.org/ | | File Size: | 15792 | | Last Modified: | May 5 15:00:07 2000 |
| MD5 Checksum: | 332a85ab02b9d095ef94ee3d81982c28 |
|
| /// File Name: |
FIX_TO_LOVE.zip |
Description:
|
Divorce the Love Letter virus. Cleans the rubbish out that the Virus caused. Not elegant but does the job! Read then run the Run_Fix.bat. Use at your own risk.
| | Author: | Nathan X. | | Homepage: | http://www.geocities.com/psuleman/ | | File Size: | 2139 | | Last Modified: | May 5 15:23:45 2000 |
| MD5 Checksum: | 33ea18030997b35eb38e2e70063f6068 |
|
| /// File Name: |
iss.00-05-04.loveletter |
Description:
|
ISS Security Advisory - A dangerous Visual Basic Script (VBScript) virus, dubbed the "LoveLetter" or "ILOVEYOU" virus, has been spreading itself across the Internet through email via Microsoft Outlook and through Internet Relay Chat (IRC) using a popular IRC client named mIRC. The virus is susceptible to activation whenever the Windows Script Host features are enabled.
| | Homepage: | http://xforce.iss.net | | File Size: | 9456 | | Last Modified: | May 5 14:42:39 2000 |
| MD5 Checksum: | ecadf473b9504cba07d474c2b2c3ee0c |
|
| /// File Name: |
love-letter-source.txt |
Description:
|
Possible source to the Love Letter virus. Originally submitted to Packet Storm as Win32DLL.txt. Submitted by Ingenius N.N. who warns "Do not rename Win32DLL.txt with .vbs extention". Source
| | Author: | spyder. | | File Size: | 10136 | | Last Modified: | May 9 17:00:47 2000 |
| MD5 Checksum: | bf87e31dc502ff88d7a0328493ba0bed |
|
| /// File Name: |
mycio.loveletter |
Description:
|
myCIO.com is issuing a HIGH RISK OUTBREAK ALERT for this virus and is making available remediation tools at their website.
| | Homepage: | http://mycio.com | | File Size: | 3270 | | Last Modified: | May 5 15:33:00 2000 |
| MD5 Checksum: | eedfdefb87b0c90634192c9b50ad5457 |
|
| /// File Name: |
mycio.loveletter.update |
Description:
|
myCIO.com is issuing an update to the Love Letter virus. Two new variants of the virus have been found.
| | Homepage: | http://mycio.com | | File Size: | 17194 | | Last Modified: | May 5 15:33:12 2000 |
| MD5 Checksum: | 00b2faf93b485580b948b9fa52351135 |
|
| /// File Name: |
nolove.mz |
Description:
|
"I don't think I really love you" or writing internet worms for fun and profit.
| | Author: | Michal Zalewski. | | File Size: | 29987 | | Last Modified: | May 17 14:59:33 2000 |
| MD5 Checksum: | a1bf3c9a055dd560d416ffd234081b6d |
|
| /// File Name: |
turn.off.vbs.txt |
Description:
|
The loveletter virus, melissa, and other windows viruses that spread the same way can be defeated by disabling execution of windows scripts with the Windows Scripting Host (WSH) feature. Contains detailed instructions on doing so under Windows 95, 98, 2000, and NT.
| | Author: | Adam Cary | | File Size: | 6814 | | Last Modified: | May 9 23:30:08 2000 |
| MD5 Checksum: | d0506f0c243549cb6d9f18913ed4761b |
|
| /// File Name: |
worm.txt |
Description:
|
Writing Internet Worms for Fun and Profit - The love letter worm was very crude, and proof of concept code for much more powerful worms has been written. Expect next years worms to be architecture independent, invisable to the end user, spread without user intervention, learn and launch updated worms, polymorphic with no constant code, and dissapear after it has accomplished its objective.
| | Author: | Michal Zalewski | | Homepage: | http://lcamtuf.na.export.pl | | File Size: | 29791 | | Last Modified: | May 11 22:26:22 2000 |
| MD5 Checksum: | 8d803acf704a1c4eb860bff396247b5f |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
