'

Yeah, Yeah, LOOK!, Bewerbung, and more virus variants

Virus variants continued : VBS/Loveletter n to s

VBS/Loveletter.n

  • Alias: Variant Test

  • Subject: Variant Test

  • Body: This is a variant to the vbs virus.

  • Attachment: IMPORTANT.TXT.vbs

  • Notes: Copies itself as sndvol32.vbs and IEAKDLL.vbs. Internet Explorer start page changed to http://altalavista.box.sk. It does not download the password stealing trojan. Overwrites *.mpg, *.mpeg, *.avi, *.qt, *.qtm. Sends the file important.htm into Internet chat rooms via mIRC.

VBS/Loveletter.o

  • Alias: Unnamed

  • Subject: ILOVEYOU

  • Body: kindly check the attached LOVELETTER coming from me.

  • Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs

  • Notes: Mostly the same as A version

VBS/Loveletter.p

  • Alias: Yeah, Yeah

  • Subject: Yeah, Yeah another time to DEATH...

  • Body: This is the Killer for VBS.LOVE-LETTER.WORM.

  • Attachment: Vir-Killer.vbs

  • Notes: Sets the Internet Explorer start page to http://www.yahoo.com/Vir-Killer.exe. It does not download the password stealing trojan. Overwrites *.ZIP and *.RAR files instead of *.JPG and *.JPEG file. Hides *.PAS and *.ASM files instead of *.MP3 and *.MP2

VBS/Loveletter.q

  • Alias: LOOK!

  • Subject: LOOK!

  • Body: hehe...check this out.

  • Attachment: LOOK.vbs

  • Notes: none

VBS/Loveletter.r

  • Alias: Bewerbung

  • Subject: Bewerbung Kreolina

  • Body: Sehr geehrte Damen und Herren!

  • Attachment: BEWERBUNG.TXT.vbs

  • Notes: Send HTM file to chat rooms

VBS/Loveletter.s

  • Alias: Unnamed

  • Subject: ILOVEYOU

  • Body: kindly check the attached.

  • Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs

  • Notes: Same as A except several comment lines have been added.

Variants : a to e Think it's over? Think again. Here are the latest variants to watch for in your email inbox.

Variants : f to i Phoney Symantec warning and 'Important!' virus variants.

Variants : j to m "I Can't Believe This!", Arab Air and other virus variants.

Go to ZDNet's ILOVEYOU Special Report