Q-C Online support pages
Technical support article

About the "Love Bug" or "ILOVEYOU" virus



If you receive an E-mail with the topic "ILOVEYOU" do NOT open this message. Delete it without opening. This message carries a worm virus that will alter the registry in a Windows operating system and rename and delete files. The virus needs Microsoft Outlook or Outlook Express E-mail application to spread. It also spreads itself using mIRC client.

This worm appears to originate from the Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported to have been infected. The VBS.LoveLetter.A is an Internet worm that uses Microsoft Outlook to e-mail itself as an attachment. The subject line of the e-mail reads ILOVEYOU, with the attachment titled LOVE-LETTER-FOR-YOU.TXT.VBS. Once the attachment is opened, the virus replicates and sends an e-mail to all e-mail addresses listed in the address book. The virus also spreads itself via Internet relay chat and infects files on local and remote drives including files with extensions vbs, vbe, js, sje, css, wsh, sct, hta, jpg, jpeg, mp3, mp2.

Several mutations of the "I Love You" virus are being reported today: Love Bug, Susitikim, Lithuania, Very Funny Joke, Mother's Day, Virus Warning, Virus ALERT!!!, Brainstorm, Important! Read carefully!!, Unnamed, I Cant Believe This!!!, and Arab Air are some of the current mutations.

Below is a more detailed list of what the virus adaptions are, what the E-mails that they come in look like, and what each adaption of the virus does. Information was provided by MSNBC.

Subject: ILOVEYOU
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: Also known as I-Worm.Loveletter, IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a.

Subject: Susitikim shi vakara kavos puodukui...
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: The subject line is Lithuanian for "Let's meet this evening for a cup of coffee."

Subject: Fwd: Joke
Body: blank
Attachment: Very Funny.vbs
Notes: Also sends Very Funny.HTM.

Subject: Mothers Day Order Confirmation
Body: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this E-mail. Please print out the attachment and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
Attachment: mothersday.vbs
Notes: This variant deletes files with the extension ".ini" and ".bat" as opposed to ".jpg" and ".jpeg". This means users will be unable to reboot their machines. VBS/Loveletter.e does not download the "WIN-BUGSFIX.exe" from the Internet, but it does modify the Internet Explorer start page.

Subject: Dangerous Virus Warning Body: There is a dangerous virus circulating. Please click attached picture to view it and learn to avoid it.
Attachment: virus_warning.jpg.vbs
Notes: Also sends Urgent_virus_warning.htm.

Subject: Virus ALERT!!!
Body: Dear Symantec customer, Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT.....
Attachment: protect.vbs
Notes: Even though it says it's from support@symantec.com, it is not from Symantec. This variant also overwrites files with .bat and .com extensions.

These are just a few of the variants regarding the "Love Bug" virus. For removal and repair, we recommend purchasing quality anti-virus software. Your best defense against a virus is to always remember to never download any strange attachment, especially if you do not know who it is coming from. If you do not know what a specific attachment is, reply to the person who sent it to you and ask, do not download. Your second line of defense should be having, and running, an up to date Anti-Virus application. For more information on virus updates and anti-virus software, visit our Virus Information section.



Local events heading








  Today is Thursday, April 17, the 107th day of 2014. There are 258 days left in the year.

1864 -- 150 years ago: Journeymen shoemakers of Rock Island struck for higher wages yesterday morning, asking 25 percent increases. Employers have acceded to their demand.
1889 -- 125 years ago: Lighting struck wires of the Merchants Electric Light Co. during a furious storm, and many Rock Island business houses were compelled to resort to gas as a means of illumination.
1914 -- 100 years ago: Members of the First Church of Christ, Scientist, decided to erect a new edifice at a cost of about $60,000.
1939 -- 75 years ago: Willard Anderson, junior forward for the Augustana College basketball team, which won 17 out of 22 contests, was elected captain of the quintet.
1964 -- 50 years ago: John Hoffman, Moline, president of the Sac-Fox Council of Boy Scouts, will be honored for his 50 years in scouting by members of the council at a dinner Thursday evening.
1989 -- 25 years ago: The Quad-Cities has what is believed to be the area's first elite-class gymnast. It's the stuff upon which Olympic competitors are made. Tiffany Chapman, of Rock Island, not only has earned the highest possible gymnast ranking, she won the honor at age 11.






(More History)