New "Love Bug" Bites Harder

Add a little "social engineering" and a more damaging payload - ILOVEYOU-II

Home
Home

News
News

Topic
Topics

AAx
AAx

Following close on the heels of the "ILOVEYOU" bug were the "me-too" worms, just ILOVEYOU with a different attachment name and perhaps a couple of other changes. Now the real varients are starting to appear.

The most popular (or unpopular depending on your point of view) of the varients has a feature technical people had already predicted. It looks throught the victims mail files and renames itself after a legitimate attachment the person recently sent, so it will look normal to the recipient.

This varient is also far more destructive than ILOVEYOU. Once it has mailed itself out it destroys system files including system files on any network drive the user has write access to making it necessary to completely reinstall Windows before the computer can be used again. Given Windows illogical structure, this will mean also reinstalling most software in order to reestablish .ini files and registry entries. Figure all day to get a computer ready for the next virus attack.

One company had all 5000 computers infected with this worm. That's got to add up to a significant business loss.

Once again, these viruses are dependent on Microsoft Outlook to propegate, and Microsoft Scripting Host to do their damage. If you are not a complete idiot, get rid of these. Yes, you can live without them (may we suggest PMMail, and I'm sure you can find some other shared scheduler if you're using that feature).

Once again, non Microsoft systems are not affected, and once again, it's not just because they're less popular. No other system presents the open invitation for virus propegation Microsoft's products do.

©:Andrew Grygus - Automation Access - www.aaxnet.com - aax@aaxnet.com
Velocity Networks: Network Consulting Service - Internet Service Provider - Web Page Design and Hosting
All trademarks and trade names are recognized as property of their owners