|
Loveletter 蠕虫变种列表 |
| VBS/Loveletter.a |
别名: “爱虫”,I-Worm.Loveletter,
IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a
标题: ILOVEYOU
正文: kindly check the attached LOVELETTER coming from me.
附件: LOVE-LETTER-FOR-YOU.TXT.vbs
|
| VBS/Loveletter.b |
别名: "Susitikim" "Lithuania"
标题: Susitikim shi vakara kavos puodukui...
正文: kindly check the attached LOVELETTER coming from me.
附件: LOVE-LETTER-FOR-YOU.TXT.vbs
注意: Lithuanian的标题行是"Let's meet this evening for a cup of coffee"
|
| VBS/Loveletter.c |
别名: "Very Funny", "Joke"
标题: Fwd: Joke
正文: 空
附件: Very Funny.vbs
注意:还发送Very Funny.HTM
|
| VBS/Loveletter.d |
别名: 无
标题: 同A
正文: 同A
附件: 同A
注意: 与Loveletter.a相比有一点轻微变异。
|
| VBS/Loveletter.e |
别名: "Mother's Day"
标题: Mothers Day Order Confirmation
正文: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this email. Please print out the 附件 and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
附件: mothersday.vbs
注意: 该变体删除扩展名为‘.ini’和‘.bat’的和‘.jpg’,‘.jpeg’相反的文件。这意味着用户将不能再启动他们的机器。VBS/Loveletter.e不会从互联网上下载"WIN-BUGSFIX.exe",但是它会修改Internet Explorer的开始页面。
|
| VBS/Loveletter.f |
别名: "Virus Warning"
标题: Dangerous Virus Warning
正文: There is a dangerous virus circulating. Please click attached picture to view it and learn to avoid it.
附件: virus_warning.jpg.vbs
注意: 还发送Urgent_virus_warning.htm. |
| VBS/Loveletter.g |
别名: "Virus ALERT!!!"
标题: Virus ALERT!!!
正文: Dear Symantec customer,
Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT.
This worm appears to originate from the Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported infected. The VBS.LoveLetter.A is an Internet worm that uses Microsoft Outlook to e-mail itself as an attachment. The subject line of the e-mail reads ILOVEYOU, with the attachment titled LOVE-LETTER-FOR-YOU.TXT.VBS. Once the attachment is opened, the virus replicates and sends an e-mail to all e-mail addresses listed in the address book. The virus also spreads itself via Internet relay chat and infects files on local and remote drives including files with extensions vbs, vbe, js, sje, css, wsh, sct, hta, jpg, jpeg, mp3, mp2.
Users should exercise caution when opening e-mails with this subject line, even if the e-mail is from someone they know, as that is how the virus is spread.
Symantec Corp. today announced availability of the virus definition to detect, repair and protect users against the VBS.LoveLetter.A virus.
This definition is available now via Symantec's LiveUpdate and can also be downloaded from the following web sites:
http://www.symantecstore.com/AF74211/promo/ loveletter and
http://www.digitalriver.com/symantec
Also as a quick solution Symantec Corp. offers Visual Basic Script to protect your PC against this worm. (See attached.)
Note! When executed, this script will protect Your PC from being INFECTED by VBS.LoveLetter.A virus.
To cure already infected PC's download Norton Antivirus Updates mentioned above.
Symantec Corporation - a world leader in internet security technology.
附件: protect.vbs
注意: 尽管它自称来自support@symantec.com,实际上并不是来自赛门铁克.该变体还会覆盖带有.bat和.com扩展名的文件. |
| VBS/Loveletter.h |
别名: "No Comments"
标题: 同A
正文: 同A
附件: 同A
注意:有一点和A轻微的不同.蠕虫病毒代码的前几行注解被删除.
|
| VBS/Loveletter.i |
别名: "Brainstorm" "Important! Read carefully!!"
标题: Important ! Read carefully!!
正文: Check the attached IMPORTANT coming from me!
附件: IMPORTANT.TXT.vbs
|
| VBS/Loveletter.j |
别名:无
标题: Virus ALERT!
正文:与 g 别名为 "Virus ALERT!" 的病毒相同
附件: protect.vbs
注意:看来是Loveletter.g 别名 "Virus ALERT!"的一个变体.
|
| VBS/Loveletter.k |
别名: 无
标题: How to protect yourself from the ILOVEYOU bug!
正文: Here's they easy way to fix the love virus.
附件: Virus-Protection-Instructions.vbs
|
| VBS/Loveletter.l |
别名:"I Cant Believe This!!!"
标题: I Cant Believe This!!!
正文: I Cant Believe I have Just Recieved This Hate Email .. Take A Look!
附件: "KillEmAll.TXT.VBS"
注意: 取代.gif和.bmp文件,隐藏.wav和.mid文件.它还复制KILER.HTM, KILLER2.VBS, KILLER1.VBS到硬盘. |
| VBS/Loveletter.m |
别名:"Arab Air"
标题: Thank You For Flying With Arab Airlines
正文: Please check if the bill is correct, by opening the attached file.
附件: KillEmAll.TXT.VBS
注意:用.dll和.exe文件取代.jpg.和jpeg并复制no-hate-FOR-YOU.htm到你的硬盘.
|
| VBS/Loveletter.n |
别名: "Variant Test"
标题: Variant Test
正文: This is a variant to the vbs virus.
附件: IMPORTANT.TXT.vbs
注意:以sndvol32.vbs 和IEAKDLL.vbs复制自己.Internet Explorer的开始页面改变为
http://altalavista.box.sk. 它不会下载偷取密码的特洛伊木马. 覆盖*.mpg, *.mpeg, *.avi, *.qt, .qtm. 经过mIRC发送important.htm到互联网聊天室.
|
| VBS/Loveletter.o |
别名: 无
标题: ILOVEYOU
正文: kindly check the attached LOVELETTER coming from me.
附件: LOVE-LETTER-FOR-YOU.TXT.vbs
注意: 几乎都和A相同.
|
| VBS/Loveletter.p |
别名: "Yeah, Yeah"
标题: Yeah, Yeah another time to DEATH...
正文: This is the Killer for VBS.LOVE-LETTER.WORM.
附件: Vir-Killer.vbs
注意: 将Internet Explorer的开始页面设为http://www.yahoo.com/Vir-Killer.exe. 它不会下载偷取密码的特洛伊木马.用*.ZIP 和*.RAR覆盖*.JPG和 *.JPEG文件.用*.MP3和*.MP2隐藏*.PAS和*.ASM文件.
|
| VBS/Loveletter.q |
别名: "LOOK!"
标题: LOOK!
正文: hehe...check this out.
附件: LOOK.vbs
注意: 无
|
| VBS/Loveletter.r |
别名: "Bewerbung"
标题: Bewerbung Kreolina
正文: Sehr geehrte Damen und Herren!
附件: BEWERBUNG.TXT.vbs
注意: 发送HTM文件到聊天室.
|
| VBS/Loveletter.s |
别名: 无
标题: ILOVEYOU
正文: kindly check the attached.
附件: LOVE-LETTER-FOR-YOU.TXT.vbs
注意: 同A,除添加若干行注解
|
|
|
|