New modifications of "Love Letter" worm continue to make troubles for the World

04 May 2000
Virus News

Two more variants of a popular worm appeared.

Cambridge, UK, May 5, 2000 - Kaspersky Lab Int., a fast-growing international anti-virus software development company, warned yesterday about the discovery of the new dangerous worm named I-Worm.LoveLetter. The worm has been found "in-the-wild" and poses a real threat to computer users. Unknown malefactors have spread an infected "declaration of love" all over the world. It took only a few hours on 4th of May for the worm to infect thousands of computers in many countries.

Today May 5, 2000 new variants of this worm were delivered to Kaspersky Lab's antivirus lab. The virus code of these samples is similar to I-Worm.LoveLetter. However, the subject of messages and text inside bodies of the messages is different.

Kaspersky Lab. would like to warn Internet users that following messages contains malicious code and should be treated as very dangerous.

Subject: fwd: Joke

Message body: empty

Attachment: Very Funny.vbs

Subject: Mothers Day Order Confirmation

Message body: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this email. Please print out the attachment and keep it in a safe place. Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com

Attachment: mothersday.vbs

These worms differ in the damage that they cause to users PCs. Mothers Day is the most dangerous. It damages INI and BAT files on users workstations making it impossible to boot up the PC.

To protect youself from these new viruses please visit "Anti-Virus Updates" for new updates.

Additional information:

  1. Technical description of I-Worm.LoveLetter
  2. Technical description of I-Worm.LoveLetter.b