|VBS/LoveLetter.worm is a
dangerous VBScript worm, discovered 5/4/00.
**UPDATE**: Eight variants have been discovered as of 8:30 am, 5/5/00. The information below applies to all known variants.
There are a growing number of variants of this worm being transmitted via email attachment. The most common are:
SUBJECT: "Virus ALERT!!!"
SUBJECT: "Dangerous Virus Warning"
SUBJECT: "Important ! Read carefully !!"
SUBJECT: "Mothers Day Order Confirmation"
SUBJECT: "Susitikim shi vakara kavos puodukui..."
This worm attempts to send copies of itself through mIRC to the IRC channels and through Outlook to all address book entries. It then attempts to overwrite several types of files, including .jpg and .mp3.
VBS/LoveLetter.worm also attempts to download and install an executable file that will email any cached passwords it finds to a predetermined address.