Threat Description

LoveLetter.E

Details

Aliases:LoveLetter.E
Category:Malware
Type:Worm
Platform:VBS

Summary



This variant of Email-Worm:VBS/Loveletter is distributed as an infectious e-mail file attachment.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



VBS/LoveLetter.E spreads itself in a message which looks like this:

Subject: Mothers Day Order Confirmation
 Body: We have proceeded to charge your credit card for the
 amount of $326.92 for the mothers day diamond special.
 We have attached a detailed invoice to this email.
 Please print out the attachment and keep it in a safe
 place.Thanks Again and Have a Happy Mothers Day!
 mothersday@subdimension.com
 Attachment: mothersday.vbs
	
	

In addition, this variant deletes all files with the extensions ".ini" and ".bat" instead of ".jpg" and ".jpeg".

This variant does not attempt to download the "WIN-BUGSFIX.exe" from the Internet, though it modifies the Internet Explorer start page.





Technical Details: Katrin Tocheva, Mikko Hypponen, Alexey Podrezov and Sami Rautiainen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More