Home > Threat descriptions >

LoveLetter.K

Classification

Category: Malware

Type: Worm

Aliases: LoveLetter.K

Summary


This variant of Email-Worm:VBS/Loveletter is distributed as an infectious email file attachment.

Removal


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details


This variant sends messages with the following content:

Subject:

Thank You For Flying With Arab Airlines

 Body: Please check if the bill is correct, by opening the

 attached file.

 Attachment: ArabAir.TXT.vbs 	 	

VBS/LoveLetter.K deletes files with ".dll" and ".exe" extensions and creates a new file with an additional ".vbs" extension. Then the virus locates all files with the ".sys" extension, creates a new file with the ".vbs" extension and hides the original file.