Virus Update 4

Other Useful Free Links:

Free online virus scanning service:
Click the above icon and wait for a few minutes for the program to initialise


Virus Datafile Update
PcCillin
Norton Antivirus
McAfee VirusScan
Dr. Soloman's

VirusScan Hrly update
(for V3 engine)

(for V4 engine)


Update to Scan Engines
PcCillin
McAfee VirusScan (ver 3.2.2)


Microsoft security patch for word97


An article from ZDNet on
How to Protect Yourself from Viruses.

 

ILOVEYOU
(updated on 11/05/00)

This VBS.LoveLetter virus has taken the world by storm since 4th. May2000. It is an internet worm (i.e. self propagating) which uses Microsoft Outlook to send itself to everyone in the address book with "ILOVEYOU" in the subject line. By now, it is likely to have infected more than a million! computers worldwide, causing havoc without any sign of remedy.

Only the most up to date virus datafile (dated after 4th May 2000) can detect this virus. If you don't have a virus scanning software, use the free scanning service on the left to check for this virus.

Many variants of it has quickly evolved. Now with different email subjects and with attachment renamed. There are now more than 25 variants !!! So be very careful when opening attachment to email. Scan the file before you open it.

Those using MIRC for chat, beware when someone sends you a file. The virus come as .htm file with different names like "mothersday.HTM", "Urgent_virus_warning.htm", "BEWERBUNG.HTM", "UOL.HTM" etc....
Follow the links given at the bottom of this page for more details.

Here are the different known email subject lines:
"Susitikim shi vakara kavos puodukui..."
"fwd: Joke"
"Mother's Day Confirmation Order"
"Important ! Read carefully !!"
"Virus ALERT!!!
" Dangerous Virus Warning"
"Thank You For Flying With Arab Airlines"
"How to protect yourself from the IL0VEY0U bug!"
"Variant Test"
"LOOK! "
"I Cant Believe This!!!"
"Bewerbung Kreolina "
"Recent Virus Attacks-Fix "
"Yeah, Yeah another time to DEATH..."
" PresenteUOL"
" IMPORTANT: Official virus and bug fix"
"NEUE ANTI-VIRUS-LISTE"
"BUG & VIRUS FIX"
"New Variation on LOVEBUG Update Anti-Virus!!"

By the time you read this, there may be other new variants with different subject lines circulating.

Anyway, it's best during this high risk period not to open any attachment with file name which ends with ".vbs" But note that in some PCs, you may not be able to see the .vbs extension as it is hidden by Windows e.g. "Important.TXT.vbs" may appear as "Important.TXT"

The following files are known to contain the virus:
"Love-letter-for-you.txt.vbs",
"Very Funny.vbs",
"mothersday.vbs",
"Important.TXT.vbs"
"protect.vbs"
"virus_warning.jpg.vbs"
"ArabAir.TXT.vbs"
"Virus-Protection-Instructions.vbs"
"LOOK.vbs"
"KillEmAll.TXT.vbs "
"BEWERBUNG.TXT.vbs"
"BAND-AID.DOC.vbs "
"Vir-Killer.vbs"
"UOL.TXT.vbs"
"Bug and virus fix.vbs"
"ANTI-VIRUS-LISTE.TXT.vbs "
"MAJOR BUG & VIRUS FIX.vbs"
"antivirusupdate.vbs"

Warning: In some PC, you may not be able to see the .vbs extension as it is hidden by Windows. The above list is not complete as new variants are continuing to surface.

Once opened, it overwrites files on local and remote drives with the following extension: .vbs, .vbe, .js, .jse, .css, .wsh, .sct, .hta, .jpg, .jpeg, .mp3, and .mp2. Variants affect the following additional files: .bat, .gif, .tif, .tiff, .wav, .mid, .lnk, .bak, .doc, .xls, .rtf, .txt, .htm, .html, .xml, .mny, .zip, .bmp, .cab, .inf, .exe, .mdb, .mpeg, .mpg, .qt, .qtm, .avi, .dll, .sys, .com, .rar, .PDF, .WSH, .DOT, .DRV

If you are not sure about an attachment that you received, please scan the file before you open it.

Here are some useful links where you can obtain more information on the virus and how to clean it:

  • More info on ILOVEYOU from TrendMicro incl. free scanning.
  • Symantec Site for instructions on removing the virus manually (for experienced computer users)
  • McAfee site on the ILOVEYOU.
  • View the loveletter email here

Other useful virus information on this site:


Some useful links to obtain free virus datafile update and free online scanning service are listed on the left column of this page.


 


Lastly, if you find the above useful, please let your friends know about this site: freetoo.cjb.net
and sign my guestbook.

   
             Back to top           

     
           
If you have any questions, please feel free to email me at webmasterfreetoo.cjb.net

Last update:11th May 00