您的位置:主页 >>  病毒信息 >>  网络病毒专科



“爱虫”病毒专题




    不用多说,大家对“爱虫”病毒的危害已经十分清楚,自从第一封“LOVELETTER”传播以来,
爱虫不断翻新花样,危害始终未减,这不,在二十一世纪刚开始的时候,“爱虫”家族已是“人丁”兴旺,下面列出了主要成员,大家多加辨别!

>>病毒资料库中相关资料细节

Loveletter 蠕虫变种列表

VBS/Loveletter.a

别名
: “爱虫”,I-Worm.Loveletter, IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a 
标题: ILOVEYOU 
正文: kindly check the attached LOVELETTER coming from me. 
附件: LOVE-LETTER-FOR-YOU.TXT.vbs 
VBS/Loveletter.b

别名
: "Susitikim" "Lithuania" 
标题: Susitikim shi vakara kavos puodukui... 
正文: kindly check the attached LOVELETTER coming from me. 
附件: LOVE-LETTER-FOR-YOU.TXT.vbs 
注意: Lithuanian的标题行是"Let's meet this evening for a cup of coffee" 
VBS/Loveletter.c

别名
: "Very Funny", "Joke" 
标题: Fwd: Joke 
正文: 空 
附件: Very Funny.vbs 
注意:还发送Very Funny.HTM 
VBS/Loveletter.d

别名: 无 
标题: 同A 
正文: 同A 
附件: 同A 
注意: 与Loveletter.a相比有一点轻微变异。
VBS/Loveletter.e

别名: "Mother's Day" 
标题: Mothers Day Order Confirmation 
正文: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this email. Please print out the 附件 and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com 
附件: mothersday.vbs 
注意: 该变体删除扩展名为‘.ini’和‘.bat’的和‘.jpg’,‘.jpeg’相反的文件。这意味着用户将不能再启动他们的机器。VBS/Loveletter.e不会从互联网上下载"WIN-BUGSFIX.exe",但是它会修改Internet Explorer的开始页面。 
VBS/Loveletter.f

别名: "Virus Warning" 
标题: Dangerous Virus Warning 
正文: There is a dangerous virus circulating. Please click attached picture to view it and learn to avoid it. 
附件: virus_warning.jpg.vbs 
注意: 还发送Urgent_virus_warning.htm. 
VBS/Loveletter.g
别名: "Virus ALERT!!!" 
标题: Virus ALERT!!! 
正文: Dear Symantec customer, 

Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT.

This worm appears to originate from the Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported infected. The VBS.LoveLetter.A is an Internet worm that uses Microsoft Outlook to e-mail itself as an attachment. The subject line of the e-mail reads ILOVEYOU, with the attachment titled LOVE-LETTER-FOR-YOU.TXT.VBS. Once the attachment is opened, the virus replicates and sends an e-mail to all e-mail addresses listed in the address book. The virus also spreads itself via Internet relay chat and infects files on local and remote drives including files with extensions vbs, vbe, js, sje, css, wsh, sct, hta, jpg, jpeg, mp3, mp2.

Users should exercise caution when opening e-mails with this subject line, even if the e-mail is from someone they know, as that is how the virus is spread.

Symantec Corp. today announced availability of the virus definition to detect, repair and protect users against the VBS.LoveLetter.A virus.

This definition is available now via Symantec's LiveUpdate and can also be downloaded from the following web sites: 
http://www.symantecstore.com/AF74211/promo/ loveletter and 
http://www.digitalriver.com/symantec 

Also as a quick solution Symantec Corp. offers Visual Basic Script to protect your PC against this worm. (See attached.) 

Note! When executed, this script will protect Your PC from being INFECTED by VBS.LoveLetter.A virus.

To cure already infected PC's download Norton Antivirus Updates mentioned above.

Symantec Corporation - a world leader in internet security technology. 
附件: protect.vbs 
注意: 尽管它自称来自support@symantec.com,实际上并不是来自赛门铁克.该变体还会覆盖带有.bat和.com扩展名的文件. 
VBS/Loveletter.h

别名: "No Comments" 
标题: 同A 
正文: 同A 
附件: 同A 
注意:有一点和A轻微的不同.蠕虫病毒代码的前几行注解被删除. 
VBS/Loveletter.i

别名: "Brainstorm" "Important! Read carefully!!" 
标题: Important ! Read carefully!! 
正文: Check the attached IMPORTANT coming from me! 
附件: IMPORTANT.TXT.vbs 
VBS/Loveletter.j

别名:无
标题: Virus ALERT! 
正文:与 g 别名为 "Virus ALERT!" 的病毒相同 
附件: protect.vbs 
注意:看来是Loveletter.g 别名 "Virus ALERT!"的一个变体. 
VBS/Loveletter.k

别名: 无 
: How to protect yourself from the ILOVEYOU bug! 
正文: Here's they easy way to fix the love virus. 
附件: Virus-Protection-Instructions.vbs 
VBS/Loveletter.l
别名:"I Cant Believe This!!!" 
标题: I Cant Believe This!!! 
正文: I Cant Believe I have Just Recieved This Hate Email .. Take A Look! 
附件: "KillEmAll.TXT.VBS" 
注意: 取代.gif和.bmp文件,隐藏.wav和.mid文件.它还复制KILER.HTM, KILLER2.VBS, KILLER1.VBS到硬盘. 
VBS/Loveletter.m


别名:"Arab Air" 
标题: Thank You For Flying With Arab Airlines 
正文: Please check if the bill is correct, by opening the attached file. 
附件: KillEmAll.TXT.VBS 
注意:用.dll和.exe文件取代.jpg.和jpeg并复制no-hate-FOR-YOU.htm到你的硬盘. 
VBS/Loveletter.n

别名: "Variant Test" 
标题: Variant Test 
正文: This is a variant to the vbs virus. 
附件: IMPORTANT.TXT.vbs 
注意:以sndvol32.vbs 和IEAKDLL.vbs复制自己.Internet Explorer的开始页面改变为
http://altalavista.box.sk. 它不会下载偷取密码的特洛伊木马. 覆盖*.mpg, *.mpeg, *.avi, *.qt, .qtm. 经过mIRC发送important.htm到互联网聊天室. 
VBS/Loveletter.o

别名: 无 
标题: ILOVEYOU 
正文: kindly check the attached LOVELETTER coming from me. 
附件: LOVE-LETTER-FOR-YOU.TXT.vbs 
注意: 几乎都和A相同. 
VBS/Loveletter.p

别名: "Yeah, Yeah" 
标题: Yeah, Yeah another time to DEATH... 
正文: This is the Killer for VBS.LOVE-LETTER.WORM. 
附件: Vir-Killer.vbs 
注意: 将Internet Explorer的开始页面设为http://www.yahoo.com/Vir-Killer.exe. 它不会下载偷取密码的特洛伊木马.用*.ZIP 和*.RAR覆盖*.JPG和 *.JPEG文件.用*.MP3和*.MP2隐藏*.PAS和*.ASM文件.
 
VBS/Loveletter.q

别名: "LOOK!" 
标题: LOOK! 
正文: hehe...check this out. 
附件: LOOK.vbs 
注意: 无 
VBS/Loveletter.r

别名: "Bewerbung" 
标题: Bewerbung Kreolina 
正文: Sehr geehrte Damen und Herren! 
附件: BEWERBUNG.TXT.vbs 
注意: 发送HTM文件到聊天室. 
VBS/Loveletter.s

别名: 无 
标题: ILOVEYOU 
正文: kindly check the attached. 
附件: LOVE-LETTER-FOR-YOU.TXT.vbs 
注意: 同A,除添加若干行注解