Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


LoveLetter.K


Aliases:


LoveLetter.K

Malware
Worm
VBS

Summary

This variant of Email-Worm:VBS/Loveletter is distributed as an infectious e-mail file attachment.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

This variant sends messages with the following content:

Subject:    Thank You For Flying With Arab Airlines
    Body:       Please check if the bill is correct, by opening the
    attached file.
    Attachment: ArabAir.TXT.vbs
	
	

VBS/LoveLetter.K deletes files with ".dll" and ".exe" extensions and creates a new file with an additional ".vbs" extension. Then the virus locates all files with the ".sys" extension, creates a new file with the ".vbs" extension and hides the original file.





Technical Details: Katrin Tocheva, Mikko Hypponen, Alexey Podrezov and Sami Rautiainen, F-Secure



Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.

Scan and clean your PC




F-Secure Online Scanner will scan and clean your PC in just a few minutes for free