Q-C Online support pages
Technical support article

About the "Love Bug" or "ILOVEYOU" virus



If you receive an E-mail with the topic "ILOVEYOU" do NOT open this message. Delete it without opening. This message carries a worm virus that will alter the registry in a Windows operating system and rename and delete files. The virus needs Microsoft Outlook or Outlook Express E-mail application to spread. It also spreads itself using mIRC client.

This worm appears to originate from the Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported to have been infected. The VBS.LoveLetter.A is an Internet worm that uses Microsoft Outlook to e-mail itself as an attachment. The subject line of the e-mail reads ILOVEYOU, with the attachment titled LOVE-LETTER-FOR-YOU.TXT.VBS. Once the attachment is opened, the virus replicates and sends an e-mail to all e-mail addresses listed in the address book. The virus also spreads itself via Internet relay chat and infects files on local and remote drives including files with extensions vbs, vbe, js, sje, css, wsh, sct, hta, jpg, jpeg, mp3, mp2.

Several mutations of the "I Love You" virus are being reported today: Love Bug, Susitikim, Lithuania, Very Funny Joke, Mother's Day, Virus Warning, Virus ALERT!!!, Brainstorm, Important! Read carefully!!, Unnamed, I Cant Believe This!!!, and Arab Air are some of the current mutations.

Below is a more detailed list of what the virus adaptions are, what the E-mails that they come in look like, and what each adaption of the virus does. Information was provided by MSNBC.

Subject: ILOVEYOU
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: Also known as I-Worm.Loveletter, IRC/Loveletter, Loveletter, Troj/LoveLet-A, VBS.Loveletter.a.

Subject: Susitikim shi vakara kavos puodukui...
Body: kindly check the attached LOVELETTER coming from me.
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Notes: The subject line is Lithuanian for "Let's meet this evening for a cup of coffee."

Subject: Fwd: Joke
Body: blank
Attachment: Very Funny.vbs
Notes: Also sends Very Funny.HTM.

Subject: Mothers Day Order Confirmation
Body: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this E-mail. Please print out the attachment and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
Attachment: mothersday.vbs
Notes: This variant deletes files with the extension ".ini" and ".bat" as opposed to ".jpg" and ".jpeg". This means users will be unable to reboot their machines. VBS/Loveletter.e does not download the "WIN-BUGSFIX.exe" from the Internet, but it does modify the Internet Explorer start page.

Subject: Dangerous Virus Warning Body: There is a dangerous virus circulating. Please click attached picture to view it and learn to avoid it.
Attachment: virus_warning.jpg.vbs
Notes: Also sends Urgent_virus_warning.htm.

Subject: Virus ALERT!!!
Body: Dear Symantec customer, Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT.....
Attachment: protect.vbs
Notes: Even though it says it's from support@symantec.com, it is not from Symantec. This variant also overwrites files with .bat and .com extensions.

These are just a few of the variants regarding the "Love Bug" virus. For removal and repair, we recommend purchasing quality anti-virus software. Your best defense against a virus is to always remember to never download any strange attachment, especially if you do not know who it is coming from. If you do not know what a specific attachment is, reply to the person who sent it to you and ask, do not download. Your second line of defense should be having, and running, an up to date Anti-Virus application. For more information on virus updates and anti-virus software, visit our Virus Information section.



Local events heading








  Today is Wednesday, April 16, the 106th day of 2014. There are 259 days left in the year.
1864 -- 150 years ago: Yesterday some bold thief stole a full bolt of calico from a box in front of Wadsworth's store, where it was on exhibition.
1889 -- 125 years ago: A team belonging to Peter Priese got away from its driver and made a mad run across the Rock Island Bridge. The driver was thrown from his seat but not hurt.
1914 -- 100 years ago: Carlton Taylor was appointed district deputy grand master for the 14th
Masonic District of Illinois.
1939 -- 75 years ago: Moline's million dollar municipal airport was dedicated to air transportation and the national defense by Lt. Gov. John Stelle.
1964 -- 50 years ago: THE ARGUS will be election headquarters for Rock Island County tomorrow night, and the public is invited to watch the operation. The closing of the polls at 6 p.m. will mark the start of open house in the newsroom. Visitors will see staff members receiving, tabulating and posting returns.
1989 -- 25 years ago: Few bricks actually tumbled, but no one seemed to mind as about 1,000 people gathered to celebrate the formal start of demolition at the site of a downtown civic center.




(More History)