Warning: 23 variants of VBS/LoveLetter virus found as of May 9, 2000 !!

[jmm]

Warning: 23 variants of VBS/LoveLetter virus found as of May 9, 2000 !!
Name    Message Subject    Attached File Name    Miscellaneous Notes
VBS/LoveLetter.A    ILOVEYOU    LOVE-LETTER-FOR-YOU.TXT.vbs    Original
virus from Philipines
VBS/LoveLetter.B    Susitikim shi vakara kavos poudukui =8A
LOVE-LETTER-FOR-YOU.TXT.vbs    Changes code comments to "Modified Lameris
Tamoshius / Lithuania (Tovi systems)
VBS/LoveLetter.C    fwd: Joke    Very Funny.vbs    Changes to Very Funny.HT=
M
VBS/LoveLetter.D    ILOVEYOU    LOVE-LETTER-FOR-YOU.TXT.vbs    Includes
commented and tabulated code.Comments begin with "added by The Hidden May 4=
,
2000"
VBS/LoveLetter.E    Mothers Day Order Confirmation    Mothersday.vbs
Changes URL to point to hacking Websites. Does not download the Trojan
Horse.
VBS/LoveLetter.F    Dangerous Virus Warning    Virus_warning.jpg.vbs
Creates Urgent_Virus_Warning.htm instead of Love-Letter-For-you.htm. Does
not download the Trojan Horse
VBS/LoveLetter.G    Virus Alert!!!    Protect.vbs    Email supposedly comin=
g
from support@symantec.com. Also deletes COM and BAT files. Does not downloa=
d
the Trojan Horse. Email sent with priority 5.
VBS/LoveLetter.H    ILOVEYOU    LOVE-LETTER-FOR-YOU.TXT.vbs    Commented
lines of code are not included
VBS/LoveLetter.I    Important, Read carefully!!    Important.txt.vbs
Write ESKernel32.vbs isntead of MSKernel32.vbs and ES32DLL.vbs instead of
Win32DLL.vbs
VBS/LoveLetter.J    How to protect yourself from the ILOVEYOU
Virus-Protection-Instructions.vbs    Code Comment: "Barok writes f*****
code. And he can=B4t spell for crap, either."
VBS/LoveLetter.K    Thank You For Flying Arab Airlines    ArabAir.txt.vbs
Code Comment: "Originally submitted to Packet Storm as Win32DLL.txt"
VBS/LoveLetter.L    Bewerbung Kreolina    Bewerbung.txt.vbs    Commented
lines of code are not included
VBS/LoveLetter.M    ILOVEYOU    LOVE-LETTER-FOR-YOU.TXT.vbs    Same as .A
but assigns WIN- -BUGSFIX.exe in the registry (note the space between
hyphens)
VBS/LoveLetter.N    Variant Test    Important.txt.vbs    Changes Internet
Explorer Start Page to http://www.astalavista.box.sk. Code Comment:
"Loveletter virus variant for testing Anti-Virus software". Does not
download the Trojan Horse
VBS/LoveLetter.O    ILOVEYOU    LOVE-LETTER-FOR-YOU.TXT.vbs    Adds the
following comment to Script.ini: "Bla Bla Bla"
VBS/LoveLetter.P    Yeah, Yeah another time to DEATH...    Vir-Killer.vbs
Changes Internet Explorer Start Page to Yahoo, MSN, Hotmail and AOL.
VBS/LoveLetter.Q    LOOK!    LOOK.vbs    No Comments
VBS/LoveLetter.R    Virus Alert!!!    Protect.vbs    Small code space
changes over VBS/LoveLetter.G
VBS/LoveLetter.S    I Cant Belive This!!!    KillEmAll.TXT.vbs    No
Comments
VBS/LoveLetter.T    Recent Virus Attacks-Fix    BAND-AID.DOC.vbs    Code
Comment: "Band-Aid -i hate listen to wine- Seattle, WA candystore@mail.com"
VBS/LoveLetter.U    BUG & VIRUS FIX    MAJOR BUG & VIRUS FIX.vbs    Code
Comment: "inr00t -Not new...but a much better payload -enjoy"
VBS/LoveLetter.V    PresenteUOL    UOL.TXT.vbs    Changes Internet Explorer
Start Page to http://www.uol.com.br/. Code Comment: "barok -uolpresente(vbe=
)
-i hate go to school-"
VBS/LoveLetter.W    IMPORTANT: Official virus and bug fix    Bug and virus
fix.vbs    Changes Internet Explorer Start Page to http://www.2600.com
=A9 Copyright Panda Software 2000