Q-C Online support pages
Technical support article

About the "Love Bug" or "ILOVEYOU" virus



If you receive an E-mail with the topic "ILOVEYOU" do NOT open this message. Delete it without opening. This message carries a worm virus that will alter the registry in a Windows operating system and rename and delete files. The virus needs Microsoft Outlook or Outlook Express E-mail application to spread. It also spreads itself using mIRC client.

This worm appears to originate from the Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported to have been infected. The VBS.LoveLetter.A is an Internet worm that uses Microsoft Outlook to e-mail itself as an attachment. The subject line of the e-mail reads ILOVEYOU, with the attachment titled LOVE-LETTER-FOR-YOU.TXT.VBS. Once the attachment is opened, the virus replicates and sends an e-mail to all e-mail addresses listed in the address book. The virus also spreads itself via Internet relay chat and infects files on local and remote drives including files with extensions vbs, vbe, js, sje, css, wsh, sct, hta, jpg, jpeg, mp3, mp2.

Several mutations of the "I Love You" virus are being reported today: Love Bug, Susitikim, Lithuania, Very Funny Joke, Mother's Day, Virus Warning, Virus ALERT!!!, Brainstorm, Important! Read carefully!!, Unnamed, I Cant Believe This!!!, and Arab Air are some of the current mutations.

Below is a more detailed list of what the virus adaptions are, what the E-mails that they come in look like, and what each adaption of the virus does. Information was provided by MSNBC.

Subject: ILOVEYOU
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: Also known as I-Worm.Loveletter, IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a.

Subject: Susitikim shi vakara kavos puodukui...
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: The subject line is Lithuanian for "Let's meet this evening for a cup of coffee."

Subject: Fwd: Joke
Body: blank
Attachment: Very Funny.vbs
Notes: Also sends Very Funny.HTM.

Subject: Mothers Day Order Confirmation
Body: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this E-mail. Please print out the attachment and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
Attachment: mothersday.vbs
Notes: This variant deletes files with the extension ".ini" and ".bat" as opposed to ".jpg" and ".jpeg". This means users will be unable to reboot their machines. VBS/Loveletter.e does not download the "WIN-BUGSFIX.exe" from the Internet, but it does modify the Internet Explorer start page.

Subject: Dangerous Virus Warning Body: There is a dangerous virus circulating. Please click attached picture to view it and learn to avoid it.
Attachment: virus_warning.jpg.vbs
Notes: Also sends Urgent_virus_warning.htm.

Subject: Virus ALERT!!!
Body: Dear Symantec customer, Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT.....
Attachment: protect.vbs
Notes: Even though it says it's from support@symantec.com, it is not from Symantec. This variant also overwrites files with .bat and .com extensions.

These are just a few of the variants regarding the "Love Bug" virus. For removal and repair, we recommend purchasing quality anti-virus software. Your best defense against a virus is to always remember to never download any strange attachment, especially if you do not know who it is coming from. If you do not know what a specific attachment is, reply to the person who sent it to you and ask, do not download. Your second line of defense should be having, and running, an up to date Anti-Virus application. For more information on virus updates and anti-virus software, visit our Virus Information section.


Local events heading








  Today is Wednesday, Aug. 20, the 232nd day of 2014. There are 133 days left in the year.
1864 -- 150 years ago: Quite a number of Negroes have lately been brought here by abolition offers returning from the army in violation of the laws of the state.
1889 -- 125 years ago: Miss Tillie Denkmann, of Rock Island, was making plans to accompany a Davenport family on a tour of Europe.
1914 -- 100 years ago: The German advance into Belgium was going apparently without serious check. The American ambassador at Berlin published a denial of the charge that Americans had been ill-treated in Germany.
1939 -- 75 years ago: Seventy-two members of Rock Island High School's 1939 graduating class are preparing to enter college — 34 of them at Augustana.
1964 -- 50 years ago: One of the oldest buildings in Milan, which for a number of years has housed the Milan Hotel, will be razed to make way for a modern, two-story office structure.
1989 -- 25 years ago: Some are blaming it on the sudden influx of insects and the extreme humidity. Still others say the invasion was inspired by a recent movie. But whatever the reason, the Quad-Cities is swarming with bats.




(More History)