Ernst Haeckel

I coils you is the name of a data-processing Ver, appeared for the first time the May 4th 2000.

Etymology

This worm car its name of the Enclosure to the Email which transports it, named Love-Letter-for-you.txt.vbs.

The Center of Coordination of CERT S speaks as for him about the worm Love Letter .

Chronology

It was spread at an extreme speed on thousands (million?) machines in the world. The Americans estimated the loss at 7 billion dollars for the United States (the figure is over-estimated perhaps a little).

Technical sides

Mechanism of contamination

The platform concerned is Windows 2000 and more. By defect, Windows hides the extension files whose type is known for him. The extension .vbs corresponds to the language of script Visual BASIC of Windows : posting thus hides this extension and shows only one file Love-Letter-for-you.txt. One with the impression to receive banal a Textual file, whereas by opening it one carries out a script.

This script also seeks on the local discs ─ but on those accessible via the network ─ all the files having some extension (files scripts, images, texts, pages HTML, etc) and replaces their contents by the source code of the worm (script). He also adds the suffix .vbs in the name of the files. He also modifies the Register base of Windows to be started again with each launching of the system. Once installed, it uses the address book of Outlook or Outlook Express to be sent itself to all the contacts of the user of the Logiciel.

Moreover, if the software MIRC is present on one of the hard drives, the virus will add a script sending to it the " automatically; letter of amour" with any person connecting itself to the same living room as the owner of the infected computer.

Release

Charge

See too

Computer security
data-processing Worm

Bonds external

the alarm of CERT:

Random links: