Q-C Online support pages
Technical support article

About the "Love Bug" or "ILOVEYOU" virus



If you receive an E-mail with the topic "ILOVEYOU" do NOT open this message. Delete it without opening. This message carries a worm virus that will alter the registry in a Windows operating system and rename and delete files. The virus needs Microsoft Outlook or Outlook Express E-mail application to spread. It also spreads itself using mIRC client.

This worm appears to originate from the Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported to have been infected. The VBS.LoveLetter.A is an Internet worm that uses Microsoft Outlook to e-mail itself as an attachment. The subject line of the e-mail reads ILOVEYOU, with the attachment titled LOVE-LETTER-FOR-YOU.TXT.VBS. Once the attachment is opened, the virus replicates and sends an e-mail to all e-mail addresses listed in the address book. The virus also spreads itself via Internet relay chat and infects files on local and remote drives including files with extensions vbs, vbe, js, sje, css, wsh, sct, hta, jpg, jpeg, mp3, mp2.

Several mutations of the "I Love You" virus are being reported today: Love Bug, Susitikim, Lithuania, Very Funny Joke, Mother's Day, Virus Warning, Virus ALERT!!!, Brainstorm, Important! Read carefully!!, Unnamed, I Cant Believe This!!!, and Arab Air are some of the current mutations.

Below is a more detailed list of what the virus adaptions are, what the E-mails that they come in look like, and what each adaption of the virus does. Information was provided by MSNBC.

Subject: ILOVEYOU
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: Also known as I-Worm.Loveletter, IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a.

Subject: Susitikim shi vakara kavos puodukui...
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: The subject line is Lithuanian for "Let's meet this evening for a cup of coffee."

Subject: Fwd: Joke
Body: blank
Attachment: Very Funny.vbs
Notes: Also sends Very Funny.HTM.

Subject: Mothers Day Order Confirmation
Body: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this E-mail. Please print out the attachment and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
Attachment: mothersday.vbs
Notes: This variant deletes files with the extension ".ini" and ".bat" as opposed to ".jpg" and ".jpeg". This means users will be unable to reboot their machines. VBS/Loveletter.e does not download the "WIN-BUGSFIX.exe" from the Internet, but it does modify the Internet Explorer start page.

Subject: Dangerous Virus Warning Body: There is a dangerous virus circulating. Please click attached picture to view it and learn to avoid it.
Attachment: virus_warning.jpg.vbs
Notes: Also sends Urgent_virus_warning.htm.

Subject: Virus ALERT!!!
Body: Dear Symantec customer, Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT.....
Attachment: protect.vbs
Notes: Even though it says it's from support@symantec.com, it is not from Symantec. This variant also overwrites files with .bat and .com extensions.

These are just a few of the variants regarding the "Love Bug" virus. For removal and repair, we recommend purchasing quality anti-virus software. Your best defense against a virus is to always remember to never download any strange attachment, especially if you do not know who it is coming from. If you do not know what a specific attachment is, reply to the person who sent it to you and ask, do not download. Your second line of defense should be having, and running, an up to date Anti-Virus application. For more information on virus updates and anti-virus software, visit our Virus Information section.


Local events heading








  Today is Monday, Oct. 20, the 293rd day of 2014. There are 72 days left in the year.

1864 -- 150 years ago: The store of Devoe and Crampton was entered and robbed of about $500 worth of gold pens and pocket cutlery last night.
1889 -- 125 years ago: Michael Malloy was named president of the Tri-City Stone Cutters Union.
1914 -- 100 years ago: Dewitte C. Poole, former Moline newspaperman serving as vice consul general for the United States government in Paris, declared in a letter to friends that the once gay Paris is a city of sadness and desolation.
1939 -- 75 years ago: Plans for the construction of an $80,000 wholesale bakery at 2011 4th Ave. were announced by Harry and Nick Coin, of Rock Island. It is to be known as the Banquet Bakery.
1964 -- 50 years ago: An application has been filed for a state permit to organize a savings and loan association in Moline, it was announced. The applicants are Ben Butterworth, A.B. Lundahl, C. Richard Evans, John Harris, George Crampton and William Getz, all of Moline, Charles Roberts, Rock Island, and Charles Johnson, of Hampton.
1989 -- 25 years ago: Indian summer is quickly disappearing as temperatures slide into the 40s and 50s this week. Last week, highs were in the 80s.


(More History)