Q-C Online support pages
Technical support article

About the "Love Bug" or "ILOVEYOU" virus



If you receive an E-mail with the topic "ILOVEYOU" do NOT open this message. Delete it without opening. This message carries a worm virus that will alter the registry in a Windows operating system and rename and delete files. The virus needs Microsoft Outlook or Outlook Express E-mail application to spread. It also spreads itself using mIRC client.

This worm appears to originate from the Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported to have been infected. The VBS.LoveLetter.A is an Internet worm that uses Microsoft Outlook to e-mail itself as an attachment. The subject line of the e-mail reads ILOVEYOU, with the attachment titled LOVE-LETTER-FOR-YOU.TXT.VBS. Once the attachment is opened, the virus replicates and sends an e-mail to all e-mail addresses listed in the address book. The virus also spreads itself via Internet relay chat and infects files on local and remote drives including files with extensions vbs, vbe, js, sje, css, wsh, sct, hta, jpg, jpeg, mp3, mp2.

Several mutations of the "I Love You" virus are being reported today: Love Bug, Susitikim, Lithuania, Very Funny Joke, Mother's Day, Virus Warning, Virus ALERT!!!, Brainstorm, Important! Read carefully!!, Unnamed, I Cant Believe This!!!, and Arab Air are some of the current mutations.

Below is a more detailed list of what the virus adaptions are, what the E-mails that they come in look like, and what each adaption of the virus does. Information was provided by MSNBC.

Subject: ILOVEYOU
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: Also known as I-Worm.Loveletter, IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a.

Subject: Susitikim shi vakara kavos puodukui...
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: The subject line is Lithuanian for "Let's meet this evening for a cup of coffee."

Subject: Fwd: Joke
Body: blank
Attachment: Very Funny.vbs
Notes: Also sends Very Funny.HTM.

Subject: Mothers Day Order Confirmation
Body: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this E-mail. Please print out the attachment and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
Attachment: mothersday.vbs
Notes: This variant deletes files with the extension ".ini" and ".bat" as opposed to ".jpg" and ".jpeg". This means users will be unable to reboot their machines. VBS/Loveletter.e does not download the "WIN-BUGSFIX.exe" from the Internet, but it does modify the Internet Explorer start page.

Subject: Dangerous Virus Warning Body: There is a dangerous virus circulating. Please click attached picture to view it and learn to avoid it.
Attachment: virus_warning.jpg.vbs
Notes: Also sends Urgent_virus_warning.htm.

Subject: Virus ALERT!!!
Body: Dear Symantec customer, Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT.....
Attachment: protect.vbs
Notes: Even though it says it's from support@symantec.com, it is not from Symantec. This variant also overwrites files with .bat and .com extensions.

These are just a few of the variants regarding the "Love Bug" virus. For removal and repair, we recommend purchasing quality anti-virus software. Your best defense against a virus is to always remember to never download any strange attachment, especially if you do not know who it is coming from. If you do not know what a specific attachment is, reply to the person who sent it to you and ask, do not download. Your second line of defense should be having, and running, an up to date Anti-Virus application. For more information on virus updates and anti-virus software, visit our Virus Information section.



Local events heading








  Today is Monday, Sept. 1, the 244th day of 2014. There are 121 days left in the year.

1864 -- 150 years ago: We are informed by J.H. Hull that the reason the street sprinkler was not at work yesterday settling the dust on the streets, was because one of his horses was injured.
1889 -- 125 years ago: Bonnie McGregor, a fleet-footed stallion owned by S.W. Wheelock of this community, covered himself with glory at Lexington, Ky, when he ran a mile in 2:13 1/2. The horse's value was estimated as at least $50,000.
1914 -- 100 years ago: Troops are pouring into Paris to prepare for defense of the city. The German army is reported to be only 60 miles from the capital of France.
1939 -- 75 years ago: The German army has invaded Poland in undeclared warfare. Poland has appealed to Great Britain and France for aid.
1964 -- 50 years ago: Publication of a plant newspaper, the Farmall Works News, has been launched at the Rock Island IHC factory and replaces a managerial newsletter.
1989 -- 25 years ago: Officials predict Monday's Rock Island Labor Parade will be the biggest and best ever. Last minute work continues on floats and costumes for the parade, which steps off a 9:30 a.m.




(More History)