F-Secure Virus Descriptions : LoveLetter.W

NAME:

LoveLetter.W

Information about the original VBS/LoveLetter.A is available at: http://www.F-Secure.com/v-descs/love.shtml

This variant spreads in e-mails with the following content:

    Subject:    IMPORTANT: Official virus and bug fix
    Body:       This is an official virus and bug fix. I got it from
                our system admin. It may take a short while to update
                your system files after you run the attachment.
    Attachment: Bug and virus fix.vbs

This variant replaces all files that have one of the following extension with itself: ".exe", ".com", ".dll" or ".sys". This will render the system to an unusuable state.

[Analysis: Katrin Tocheva, Mikko Hypponen, Alexey Podrezov and Sami Rautiainen, F-Secure]