How the 'love' virus works

The script worm arrives in an e-mail message with the subject "ILOVEYOU"

and carries an attached file titled LOVE-LETTER-FOR-YOU.TXT.vbs and the

text "kindly check the attached LOVELETTER coming from me."

Because it is based on Visual Basic script, the worm infects only computers

that have Visual Basic, which is included with Windows 2000.

If the attachment is opened, the worm inserts the following files: MSKernel32.vbs

and LOVE-LETTER-FOR-YOU.TXT.vbs in the Windows system directory; Win32DLL.vbs

in the Windows directory; WinFAT32.EXE and WIN-BUGSFIX.EXE in the Internet

download directory; and script.ini in the mIRC directory.

The file WIN-BUGSFIX.exe is a back door created in the Philippines that

collects the network passwords cached in Microsoft Corp.'s Windows operating

system and then sends them to an attacks Web site when the infected user

connects to the Internet.

When it first was detected, the worm also would go out to four different

Internet sites and pull software from those to download on infected computers,

allowing hackers to possibly break into those computers, said Narender Mangalam,

director of security at Computer Associates International Inc. The Internet

sites have been shut down.

Users are advised to immediately delete the message and the attached

file. Mangalam further advised that computer users immediately update antivirus

software.

— Dan Verton contributed to this report.

Featured

  • Defense
    The U.S. Army Corps of Engineers and the National Geospatial-Intelligence Agency (NGA) reveal concept renderings for the Next NGA West (N2W) campus from the design-build team McCarthy HITT winning proposal. The entirety of the campus is anticipated to be operational in 2025.

    How NGA is tackling interoperability challenges

    Mark Munsell, the National Geospatial-Intelligence Agency’s CTO, talks about talent shortages and how the agency is working to get more unclassified data.

  • Veterans Affairs
    Veterans Affairs CIO Jim Gfrerer speaks at an Oct. 10 FCW event (Photo credit: Troy K. Schneider)

    VA's pivot to agile

    With 10 months on the job, Veterans Affairs CIO Jim Gfrerer is pushing his organization toward a culture of constant delivery.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.