Anexo 5.Doc: Fill & Download for Free

Love letter virus. The Love Letter Virus, also known as I LOVE, ILOVEYOU and the Love Letter Virus, was a computer worm that originated in the Philippines and began infecting computers on 5 May 2000. It is delivered via e-mail, with the subject line "I love you" and the attachment, "Love-letter-for-you."Virus informationLove letter virusUpdated: 06/30/2020 on the Computer Hope websiteThe Love Letter virus, also known as the Iloveyou, ILOVEYOU and Love Letter viruses, was a computer that originated in the Philippines and started infecting computers on May 5, 2000. It was distributed by e-mail with the subject line "ILOVEYOU" and the attachment "LOVE -LETTER-FOR-YOU.txt.vbs. " If the attachment was opened, a Visual Basic script was run and the computer became infected. Many recipients were tricked because Microsoft Windows hid the file type and was confused with a plain text file. When executed, the script sent itself to everyone in the victim's contact list, edited the Windows registry to start the worm at startup, and replaced data in many data files, including JPEG images and Word documents. , copies of themselves.Additional informationLove Bug was first reported on Thursday (05/05/2000) Hong Kong afternoon and early morning in Europe, and has since been duplicated by a few copies, which has led to a few more similar variants. The virus has caused enormous grief among companies, authorities and end users by shutting down email systems, email servers, banking systems and even causing pager problems. In ten days, the virus is estimated to have infected 10% of all computers on the network in the world, and in the United States alone, $ 15 billion was spent on removing it. It is reported that the worm came from a couple of 23 and 27 years old after a raid on their apartment on Monday (08/05/2000).On May 18, 2000, with the release of the NEWLOVE virus, a new virus alert was announced. See information about this virus.Lovebug optionsLove Bug infects all Microsoft Windows and Microsoft Outlook users. Below is the subject, message and actual attachments for each of the currently known wild viruses. If you see this email, do not try to open the attachment, but instead delete the email, even if it was sent by someone you know well.Variant A (parental virus)Theme: ILOVEYOUMessage: Please check the attached LOVE that comes from me. "Attachment: LOVE-LETTER-FOR-YOU.TXT.vbsSpecial Notes: The virus starts by copying itself to the Windows directory, placing Win32dll.vbs and LOVE-LETTER-FOR-YOU.TXT.vbs. After these files are placed on the hard disk, the virus is placed in the computer registry so that the virus runs on each of the next downloads. The virus also tries to remove HideSharePwds, DisablePwdCaching and DisablePwdCaching from the data registry. After these changes are made to the computer, it will be sent to each of the persons in the address book with the subject ILOVEYOU. To complete the corruption, the virus will scan for .js, .jse, .css, .wsh, .sct and .hta, creating duplicates of each of the found files with the .vbs extension. Finally, it will find and remove all files with ".jpg" and ".jpeg" extensions (this is the most common image file format on the Internet). Then the virus will search for ".mp3" and ".mp2". "files replaces all found files with" .vbs "extension and hides the original" .mp3 "and" .mp2 "files.Option BTopic: Sushitikim shi Takara Kavos puodukui ...Message: please check the attached LOVE that comes from me. "Attachment: LOVE-LETTER-FOR-YOU.TXT.vbsOption CTopic: fwd: JokeMessage: * No message *Attachment: VeryFunny.vbsOption DTheme: ILOVEYOUMessage: Please check the attached LOVE that comes from me. "Attachment: LOVE-LETTER-FOR-YOU.TXT.vbsSpecial Notes: Creates registry entries such as WIN-BUGFIX.exe instead of WIN-BUGSFIX.exe.Option ESubject: Confirmation on Mother's DayMessage: We're starting to charge your credit card $ 326.92 for a special Mother's Day diamond. We have attached a detailed invoice to this letter. Print the attachment and keep it in a safe place. Thanks again and happy Mother's Day!Attachment: Mothersday.vbsOption FTopic: Warning about a dangerous virusMessage: a dangerous virus is circulating. Click on the attached image to see it and learn how to avoid it.Attachment: virus_warning.jpg.vbsOption GTheme: Virus warning !!!Message: A detailed message that contains information about the ILOVEYOU worm.Attachment: protect.vbsSpecial Notes: The virus claims to have been sent from [email protected] (a well-known antivirus software company), but this email is certainly not from Symantec. In addition, this variant of the worm deletes all files with the .com and .bat extensions, and seriously damages your computer.Option HTheme: ILOVEYOUMessage: please check the attached LOVE that comes from me. "Attachment: LOVE-LETTER-FOR-YOU.TXT.vbsSpecial Notes: This virus is just like variant A, with the exception ofSpecial Notes: This virus is exactly like Variant A, except that the beginning comments that give credit to the author of the worm and information about worm have been removed.Variant ISubject: Important! Read carefully!!Message: Check the attached IMPORTANT coming from me!Attachment: Imporant.TXT.vbsSpecial Notes: The beginning of the code has been changed giving credit to another author "BrainStorm@ElectronicSouls".Variant JSubject: Virus Alert!!!Message: Detailed message containing information about the ILOVEYOU worm. Appears to be same as Variant G.Attachment: protect.vbsSpecial Notes: Variant J of the ILOVEYOU worm appears to be a slightly modified version of Variant G.Variant KSubject: How to protect yourself from the ILOVEYOU bug!Message: Here's the easy way to fix the live virus.Attachment: Virus-Protection-Instructions.vbs.Variant LSubject: I Can't Believe This!!!Message: I Can't Believe I have Just Received This Hate Email .. Take A LookAttachment: KillEmAll.TXT.VBSSpecial Notes: Replaces GIF & BMP images instead of JPG & JPEG images, hide WAV & MID instead of MP3 and MP2 and copies KILER.HTM, KILLER2.VBS, KILLER1.VBS to the hard drive.Variant MSubject: Thank you For Flying with Arab AirlinesMessage: Please check if the bill is correct, by opening the attached file.Attachment: ArabAir.TXT.vbsSpecial Notes: Replaces DLL & EXE files instead of JPG & JPEG files. Hides SYS & DLL files instead of MP2 and MP3 files. Copies file onto hard drive no-hate-FOR-YOU.HTM.Variant NSubject: Variant TestMessage: This is a Variant to the VBS virusAttachment: IMPORTANT.TXT.vbsSpecial Notes: Copies itself as sndvol32.vbs and IEAKDLL.vbs. Internet Explorer starts page changes to Astalavista.box.sk. Overwrites *.mpg, *.mpeg, *.avi, *.qt, *.qtm.Variant OSubject: ILOVEYOUMessage: kindly check the attached LOVELETTER coming from me.Attachment: LOVE-LETTER-FOR-YOU.TXT.vbsSpecial Notes: The script.ini has been modified slightly.Variant PSubject: Yeah, Yeah another time to DEATH...Message: This is the Killer for VBS.LOVE-LETTER.WORMAttachment: LOOK.vbsSpecial Notes: Sets the Internet Explorer start page to http://www.yahoo.com/Vir-Killer.exe. Overwrites *.ZIP and *.RAR files and hides *.PAS and *.ASM files.Variant QSubject: LOOK!Message: hehe...check this out.Attachment: LOOK.vbsSpecial Notes: copies itself as MSUser32.vbs and User32DLL.vbs. Overnights *.XLS and *.MDB files. Hides *.EXE and *.LNK files. Creates a LOOK.HTM file.Variant RSubject: Bewerbung KarolinaMessage: Sehr geehrte Damen and Herren!Attachment: BEWERBUNG.TXT.vbsSpecial Notes: Sends BEWERBUNG.HTM into connected IRC chat rooms.Variant SSubject: ILOVEYOUMessage: Kindly check the attached LOVELETTER coming from me.Attachment: LOVE-LETTER-FOR-YOU.TXT.vbsSpecial Notes: Additional comment lines have been added into the virus.Variant TSubject: Recent Virus Attacks-FixMessage: Attached is a copy of the script that will reverse the effects of the LOVE-LETTER-TO-YOU.TXT.vbs as well as the FW: JOKE, Mother's Day and Lithuanian siblings.Attachment: BAND-AID.DOC.VBSSpecial Notes: Sets the Internet Start page to a virus related page. Deletes *.BAT, *.GIF, *.TIF, *.TIFF, *.WAV, *.LNK, *.BAK, *.DOC, *.XLS, *.RTF, *.TXT, *.HTM, *.HTML, *.XML, *.MNY, *.ZIP, *.BMP, *.CAB, and *.INF extentions.Variant USubject: UOL.TXT.vbsMessage: O UOL tem um grande presente para voce, e eh exclusivo. Veja o Arquivo em Anexo. UOL - O melhor conteúdo.Attachment: UOL.TXT.vbsSpecial Notes: Sets homepage to UOL - O melhor conteúdo and hides *.EXE, *.COM, and *.INI files.Variant VSubject: ILOVEYOUMessage: kindly check the attached LOVELETTER coming from me."Attachment: LOVE-LETTER-FOR-YOU.TXT.vbsSpecial Notes: Several comment lines have been modified.Variant WSubject: IMPORTANT: Official virus and bug fixMessage: This is an official virus and bug fix. I got it from our system admin. It may take a short while to update your system files after you run the attachment.Attachment: Bug and virus fix.vbsSpecial Notes: Sets Internet Explorer Start Page to a virus related page. Overwrites *.EXE, *.COM, *.DLL, *.SYS, *.PWL, *.TXT.Variant XSubject: NEUE antivirus-ListeMessage: Hiermit senden wir Ihnen/Dir eine Neue Liste mit LOVE-LETTER-VIRUS Namen, die nicht Geoffrey werden sollten, bitte sofort lesen, Danke.Attachment: antivirus-LISTE.TXT.vbsSpecial Notes: Overwrites *.MDB, *.PDF, *.WSH, *.DOT, *.HTA, *.JS, *.DRV, and *.INI files. Hides *.XLS and *.DOC files.Variant YSubject: LOOK!Message: hehe...check this out.Attachment: LOOK.vbsSpecial Notes: Like earlier LOOK various however hides MP3 and MP2 files.Variant ZSubject: BUG & VIRUS FIXMessage: I got this from our system admin. Run this to help prevent any recent or future bug & virus attacks. It may take a small while up update your files.Attachment: MAJOR BUG & VIRUS FIX.vbsSpecial Notes: Sets homepage as a virus-related page. Overwrites *.COM, *.DLL, *.EXE, *.TXT, *.BAT, and *.SYS files.Variant "Catalina" or "Postcard" in ItalianSubject: C Una cartolina per te! (Here is a postcard for you)Message: Ciao, un tuo amico ti ha spedito un cartolina virtuale... molto particolare! (Hello, my friend, this is a virtual postcard ... very special)Attachment: CAROLINA.VBSSpecial Notes: Sets homepage as http://www.vije.it an Italian music site.Variant "BabyPic" for adults onlySubject: My baby pic!!!Message: Its animated baby picture !!Attachment: MYBABYPIC.EXESpecial Notes: Program written in Visual Basic with an explicit graphic animated image. When opened and viewed the virus copies itself to a local file system and sends an e-mail to each MS Outlook user in the recipients' address book. The worm creates a set of files and registers them in the startup section of Windows system Registry, enabling execution each time the computer starts.The virus contains a very dangerous payload that can wipe out data on the computer, enable and disable on/off NumLock, CapsLock, and ScrollLock keys; send buffer messages ".IM_BESIDES_YOU_" and may send one of various text messages. In addition MyBabyPic also corrupts files with .VBS, .JS, .JSE, .CSS, .WSH, .SCT, .HTA, .PBL, .CPP, .PAS, .C, .H, .JPG, .JPEG, .MP2, and MP3 extensions.Ways to protect yourselfRegardless of who sends you the mail if there is an attachment verify before opening it that it does not end with .vbs. VBS (Visual Basic Script). If the attached file ends with .vbs it is recommended that you delete the e-mail.In addition, the user or system administrator can disable the execution of VBS files by following the instructions below.Windows 95 UsersOpen My ComputerClick View then OptionsClick the "File types" tabLocate and "VBScript Script File" in the registered file types listing.Single click "VBScript Script File" to highlight the file.Select Remove and confirm the file deletion.Windows 98 UsersClick Start, Settings, Control PanelDouble-click Add/Remove ProgramsClick the "Windows Setup" tabDouble-click "Accessories" from the Components listingLocate "Windows Scripting Host" from the Accessories component list and Uncheck the selection.Click Ok and then Apply and Windows Scripting Host will be uninstalled from the computer.Windows NT UsersOpen My ComputerClick View then OptionsClick the "File types" tabLocate and "VBScript Script File" in the registered file types listing.Single click "VBScript Script File" to highlight the file.Select Remove and confirm the file deletion.Windows 2000 UsersOpen My ComputerClick View then OptionsClick the "File types" tabLocate and "VBScript Script File" in the registered file types listing.Single click "VBScript Script File" to highlight the file.Select Delete and confirm the file deletion.To manually remove the virusThe Love Letter Virus (Variants A, B, C, E, F, and H) can be removed manually by following the steps below:Click Start, Find, Files or Folder and search for *.VBS and delete all files found on the hard drive.Search for the file LOVE-LETTER-FOR-YOU.HTM found in the Windows System directory and delete it.Search for WIN-BUGSFIX.EXE and WINFAT32.EXE found in the Internet Explorer download directory and delete these files.Once these files have been deleted empty the Recycle Bin and restart the computer and the Virus should be effectively removed from the computer.It is also recommended if you are currently running a Virus protection software program that you update it with the latest virus update. Doing this also removes all traces of this virus as all major virus companies have updates on their pages.Information about the Newlove virusAnnounced to be Wild 05/18/2000 the NEWLOVE virus was first reported at Israel. When ran the virus copies itself into the Windows folder and gives itself either a name from the recent document folder or gives itself a random name and extension. Once copied into this directory the virus will then send itself to all the individuals in your address book. It will then search all drives connected to the host system and replace each file with copies of itself and adds the extension.VBS to the original file name.This virus has more damage potential than the original LoveLetter virus, in addition, will rename the subject line to random choirs, therefore, cannot be detected as the Subject Line could be anything. It is recommended that all PC users and System administrators utilizing Microsoft Outlook review the "Ways to Protect Yourself" section to help prevent this potential hazardous virus from infecting your computer and data.Newlove VirusSubject: Begins with FW and then will be named from the Recent Documents folder or a random name.Message: Message is emptyAttachment: The attachment is a Randomly-selected VBS file name from the Windows Folder.Special Notes: When ran the virus copies itself into the Windows folder and gives itself either a name from the recent document folder or gives itself a random name and extension. Once copied into this directory the virus will then send itself to all the individuals in your address book. It will then search all drives connected to the host system and replace each file with copies of itself and adds the extension.VBS to the original file.