Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


LoveLetter.BE


Aliases:


LoveLetter.BE

Malware
Worm
VBS

Summary

This variant of Email-Worm:VBS/Loveletter is distributed as an infectious e-mail file attachment.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

This variant spreads in a message with the following content:

Subject:    fwd: Joke
    Attachment: Joke.vbs
	
	

VBS/LoveLetter.BE@mm is quite similar with the original VBS/LoveLetter.A. This variant saves itself to the Windows System directory as "Jokes.vbs" and "Jokes.htm".

Also this variant uses a different set of extensions, so the files with the following extensions are deleted: ".js", ".zip", ".css", ".doc", ".xls" and ".htm"; and the files with following extensions are hidden: ".mp3" and ".mid". The worm creates a new file using the original file name and a ".vbs" extension for each file that it deletes or hides.

This variant does not spread via mIRC.





Description Created: F-Secure; June 2001
Technical Details: Sami Rautiainen



Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.

Scan and clean your PC




F-Secure Online Scanner will scan and clean your PC in just a few minutes for free