Hello all,
This is very true. Some of our clients were hit with it. Some of our
employees have also received the email, but fortunatly, nobody in our office
ran the VBScript. At least one of our clients was not so lucky.
We took a look at the code. Sadly, it has exception handling and functions
and is laid out OK... for a virus. It basically mails itself to everyone
you know and downloads an executable and installs it in your startup group -
not sure what this does. Then, it browses all of your drives (mapped
network drives included) and trashes certain file types.
The FTP source for the executable has been shut down, so you don't have to
worry about that, but the VBScript itself is still VERY destructive.
Lesson to be learned - Don't execute VBScripts that you're not expecting and
you don't know what they do.
BTW - If you're using a mail-server-based virus package, you can configure
it not to allow .vbs files through as attachments.
Good look and may you not be infected.
Cheers!
Matthew
-----Original Message-----
From: A mailing list about Java Server Pages specification and reference
[mailto:[EMAIL PROTECTED]]On Behalf Of Roger Jelley
Sent: Thursday, May 04, 2000 11:15 AM
To: [EMAIL PROTECTED]
Subject: FW: Virus Warning There is a new virus titled "I LOVE YOU" or
sim ilar, being circulated at present which cannot be detected by the
virus shields.
Importance: High
> Apparently this is genuine. It sounds too bad to be true, but I am
> told a large company has already had serious problems from this.
.. Roger
-----------------------------------------------------
> Subject: Virus Warning
>
> There is a new virus being circulated at present which cannot be
> detected by the virus shields.
>
> It is titled "I LOVE YOU" or similar, and will destroy your hard drive
> when opened. This virus will activate without needing the attachments
> to be opened, simply opening the message will start it.
>
> As an added bonus, this virus will also forward itself to all the
> contacts in your Address list and will therefore probably be sent to
> you by a friend or contact.
>
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
