| Name: | Plan |
| Aliases: | VBS/Plan.A.Worm, vbs/plan.a, plan.a, Plan Colombia,VBS/LoveLetter.worm, Colombia, VBS.LoveLetter.Variant, VBS/Loveletter.AS,VBS.President, |
| Ports: | |
| Files: | Macromedia32.zip - Linux321.zip - Linux322.zip - Linux32.vbs -Reload.vbs - Logos.sys - Logow.sys - - 12,173 bytes - 12,609 bytes |
| Created: | Sep 2000 |
| Requires: | |
| Actions: | Worm / Downloading trojan / Destructive trojan / Mail trojan |
| Overwrites some selected files both one the infected computer andall networked drives. On September 17th it disconnect the user from allmounted drives. | |
| Versions: | AS, |
| Registers: | HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Run\HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\RunServices\ |
| Notes: | Works on Windows, together with MS Outlook and MS Internet Explorer. |
| Country: | written in Colombia |
| Program: | Written in Visual Basic Script (VBS). |