|
|
|
Top 10 malware reported to Sophos in September 2000
This section helps you to understand how it behaves
VBS/LoveLet-G is a variant of VBS/LoveLet worm.
It is very similar to
VBS/LoveLet-A.
Note: Due to the generic scanning methods used by SAV, this worm
may be detected in files infected with other VBS/LoveLet variants, such as:
| From |
<user> |
| Subject |
ILOVEYOU |
| Body |
kindly check the attached LOVELETTER
coming from me |
| Attachment |
LOVE-LETTER-FOR-YOU.TXT.vbs |
| Extensions targeted |
vbs, vbe, js, jse, css, wsh, sct, hta,
jpg, jpeg, mp2, mp3 |
| Files dropped |
MSKernel32.vbs, Win32DLL.vbs,
LOVE-LETTER-FOR-YOU.TXT.vbs, script.ini, LOVE-LETTER-FOR-YOU.HTM |
| |
| From |
<user> |
| Subject |
Thank You For Flying Arab Airlines |
| Body |
Please check if the bill is correct, by
opening the attached file |
| Attachment |
ArabAir.TXT.vbs |
| Extensions targeted |
vbs, vbe, js, jse, css, wsh, sct, hta,
dll, sys, exe |
| Files dropped |
MSKernel32.vbs, Win32DLL.vbs,
ArabAir.TXT.vbs, script.ini, no-hate-FOR-YOU.HTM |
| |
| From |
<user> |
| Subject |
Bewerbung Kreolina |
| Body |
Sehr geehrte Damen und Herren! |
| Attachment |
BEWERBUNG.TXT.vbs |
| Extensions targeted |
js, jse, css, wsh, sct, hta, jpg, jpeg,
mp3, mp2 |
| Files dropped |
MSKernel32.vbs, Win32DLL.vbs,
BEWERBUNG.TXT.vbs, script.ini |
| |
| From |
<user> |
| Subject |
LOOK! |
| Body |
he he ... check this out |
| Attachment |
LOOK.vbs |
| Extensions targeted |
vbs, vbe, js, jse, css, wsh, sct, hta, xls,
mdb, lnk, exe |
| Files dropped |
MSUser32.vbs, User32DLL.vbs, LOOK.vbs,
script.ini |
| |
| From |
<user> |
| Subject |
Variant Test |
| Body |
This is a variant to the vbs worm |
| Attachment |
IMPORTANT.TXT.vbs |
| Extensions targeted |
vbs, vbe, mpg, mpeg, avi, qt, qtm |
| Files dropped |
sndvol32.vbs, IEAKDLL.vbs,
IMPORTANT.TXT.vbs, script.ini |
| |
| From |
<user> |
| Subject |
I Cant Believe This!!! |
| Body |
I Cant Believe I Have Just Recieved This
Hate Email ... Take A Look! |
| Attachment |
KillEmAll.TXT.vbs |
| Extensions targeted |
js, jse, css, wsh, sct, hta, gif, bmp,
wav, mid |
| Files dropped |
killer1.vbs, killer2.vbs,
KillEmAll.TXT.vbs |
| |
| From |
<user> |
| Subject |
PresenteUOL |
| Body |
O UOL tem um grande presente para voce, e
eh exclusivo. Veja o arquivo e |
| Attachment |
UOL.TXT.vbs |
| Extensions targeted |
vbs, vbe, js, jse, css, wsh, sct, hta,
jpg, jpeg, mp3, mp2, exe, com, in |
| Files dropped |
MSKernel32.vbs, Win32DLL.vbs, UOL.TXT.vbs,
script.ini, UOL.HTM |
|
|
|
This webpage is optimized for 800 x 600 monitor resolution or above and
the latest web browser. |
|
|
