| Name: | I love you |
| Aliases: | VBS/LoveLet-A, VBS/LoveLet-B, LoveLetter, The Love Bug, fwd: Joke,Spammer, Price Quote, Susitikim, Love Bug, VBS/Contract, |
| Ports: | 25 |
| Files: | Wormfile.zip - 8,104 bytes Worm.zip - 9,096 bytes Win-bugsfix.zip - 7,976 bytes Love-letter-for-you.txt.vbs - 12,606 bytes Resume.txt.vbs - Love-letter-for-you.htm - Very funny.vbs - 9,933 bytes Mskernel32.vbs - Win32dll.vbs - Protect.vbs - Script.ini - Win-bugsfix.exe - Winfat32.exe - Hcheck.exe - - 8,814 bytes - 9,366 bytes - 9,615 bytes - 9,684 bytes - 9,774 bytes - 9,933 bytes - 9,962 bytes - 10,000 bytes - 10,074 bytes - 10,161 bytes - 10,172 bytes - 10,205 bytes - 10,221 bytes - 10,307 bytes - 10,315 bytes - 10,396 bytes - 10,521 bytes - 11,907 bytes - 12,174 bytes - 12,606 bytes |
| Created: | May 2000 |
| Requires: | |
| Actions: | Worm / IRC Trojan / Mail trojan / Destructive trojan / Stealspasswords / Downloading tojan |
| The worms spread through mail or IRC. It will also try to destroy all files with theextensions .vbs, .vbe, .js, jse, .css, .wsh, .sct, .hta and jpg, jpeg, mp3 and mp2 files. May be updated from the Internet. Alters Internet Explorer´s startpage and downloads a password stealing trojan. | |
| Versions: | A, B, C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V,W, X, Y, Z, AJ, AN, AS, AX, BB, BD, BE, BG, BJ, BL, BM, BN, CA, CH, CL, CM,CN, CQ, |
| Registers: | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ HKEY_LOCAL_ MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\ HKEY_CURRENT_USER \Software\Microsoft\Internet Explorer\Main\Start Page\ HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout HKEY_CURRENT_USER\Software\Microsoft\WAB\ |
| Notes: | Works on Windows, together with MS Internet Explorer and MS Outlookor Outlook Express, and mIRC. |
| Country: | written in the Philippines |
| Program: | Written in Visual Basic Script (VBS). |