[Hpn] Fw: Warning from FCG Networks about Love Letters Virus and extra.dat

Bill Tinker wtinker@fcgnetworks.net
Thu, 04 May 2000 15:09:53 -0400


----- Original Message -----
From: FCG Networks/Christina Asanowicz <chrisa@fcgnetworks.net>
To: cyber-announce <cyberport-announce@fcgnetworks.net>
Sent: Thursday, May 04, 2000 12:22 PM
Subject: Warning from FCG Networks about Love Letters Virus and extra.dat


>
> FCG Networks/Cyberport wanted to make our customers aware of yet another
new
> virus
> that may be going around. Although it yet may not be widespread at this
> time,
> we thought best to make you all aware of this new virus ahead of time.
> That way you can be on the lookout for this virus and be prepared ahead of
> time.
>
>  Below will describe the virus in detail and what you should be looking
for
> and what to do.
>
>
> A computer virus spread by email messages titled "ILOVEYOU" infected
Asian,
> European and U.S. computers today, including many here in New Hampshire.
>
>  The new virus originates in an email entitled "I love you." Once the
> attachment is launched, the virus sends copies of the same email to
> everybody listed in the user's address book.
>
> According to anti-virus software company GFI, the virus affects Microsoft
> Outlook users, and is also being spread over popular chat program IRC.
>
> Unlike the "Melissa" virus, which traveled in a similar fashion,
> "ILOVEYOU"
> is more destructive. First, it copies itself to two critical system
> directories and adds triggers in the Windows registry. This ensures that
> it's running every time the computer reboots.
>
> The virus then starts affecting data files. Files associated with Web
> development, including ".js" and ".css" files, will be overwritten with a
> file in the VisualBasic programming language. The original file is
deleted.
> It also goes after multimedia files, affecting JPEGs and MP3s. Again, it
> deletes the original file and overwrites it with a VisualBasic file with a
> similar name.
>
> Any customer who receives an unexpected email attachment is urged not to
> open it. Two anti-virus companies, Symantec, which makes Norton
Anti-Virus,
> and F-Secure, have posted "virus definition" files for the "ILOVEYOU"
> virus. Those files have so-called "fingerprints" for the virus, allowing
> those programs to detect and eliminate it. Due to extraordinarily high
> traffic at both of these site, we at FCG Networks have not yet been able
to
> obtain this "virus definition" file. When we do, we will post it's
location
> on our website. You can try and get this file yourself at the sites listed
> below, but again, be aware that the traffic to these sites is huge.
>
>  http://www.datafellows.com/virus-info/
>
>  http://www.symantec.com/index.html
>
>
>
>
> Christina Asanowicz
> Call Center Manager
> FCG Networks/Cyberport
> 1-800-992-3420 ext.233
> chrisa@cyberportal.net
> http://www.fcgnetworks.net
> "Quality Internet Access for Your Family and Business"
>
>
>
>
>