VBS.Loveletter.BD
 Information
about the VBS.Loveletter.BD:
VBS.LoveLetter.BD is a rapidly spreading
email worm with trojan charecteristics. This is a variant of Loveletter. This
worm executes only in systems where the Windows Scripting Host is enabled. The
infected file "resume.txt.vbs" comes as an attachment
with the mail bearing a Subject "resume" and does not
contain any body. Opening the infected attachment launches the worm. This
file creates resume.txt in the current directory and opens the following
contents in notepad.
Knowledge Engineer, Zurich
Intelligente Agenten im Internet sammeln
Informationen, erklaren Sachverhalte im Customer Service, navigieren im
Web, beantworten Email Anfragen oder verkaufen Produkte. Unsere Mandantin
entwickelt und vermarktet solche Software-Bots: State of the Art des modernen
E-Commerce. Auftraggeber sind fuhrende Unternehmen, die besonderen Wert
auf ein effizientes Customer Care Management legen. Das weltweit aktive,
NASDAQ kotierte Unternehmen mit Sitz in Boston braucht zur Verstarkung
seines explosiv wachsenden Teams in der Schweiz engagierte, hochmotivierte
und kreative Spezialisten. Kurz: Sie haben es in der Hand, die Knowledge
Facts fur aussergewohnliche Losungen im Internet zu realisieren und neue
Schnittstellen zwischen Mensch und Datenautobahnen zu schaffen. Das Tor
zur Welt steht Ihnen offen. Eine faszinierende Zukunft braucht Ihre Inspiration
und Ihr Know-how....
While displaying the resume.txt,
the worm automatically copies itself under Windows\System directory in
the background. This worm later sends mail to everyone in the address
book of Microsoft Outlook. It attaches itself to every mail that is
being sent. It modifies the registry under the following location
:
HKEY_CURRENT_USER\Software
This worm connects to internet to download
a password stealer file - hcheck.exe. On successful download, it
executes the password stealer file. After the success of the infection
routine it deletes all the temporary files created by the worm.
VBS.LoveLetter.BD first appeared in
August 2000.
Other
names of VBS.Loveletter.BD:
This worm is also known as Loveletter see
also their variants .
Removing
VBS.Loveletter.BD from your computer:
You can remove this worm from your
computer by using Protector Plus antivirus software.
Click
here to download a 30 day Evaluation Copy of
Protector Plus for your operating system
|
