Yahoo Groups archive

MOTM

Index last updated: 2026-04-28 23:35 UTC

Message

RE: [motm] Watch out for the I LOVE YOU virus

2000-05-05 by Tkacs, Ken

*UGH*

It's after 1AM EST and I've been working on this cleanup without a break
since 8:20 Am... YESTERDAY at this point.

We've actually had the fix since about 1 PM, but it's still so damned MANUAL
that the cleanup is killing us.

Then tomorrow, it's new passwords for everybody.

See why I love digital so much?  >:-(



-----Original Message-----
From: Steven McFarling [mailto:steve@...]
Sent: Thursday, 04 May, 2000 5:29 PM
To: motm@egroups.com
Subject: Re: [motm] Watch out for the I LOVE YOU virus


I know this is the MOTM list, but please bear with those of us who are 
destroyed by this crap.  There is a GREAT page on the cleanup at: 
http://www.thepope.org/index.pl?node_id=140

So far only a few instances of actual infection here, however this cleanup 
procedure contained EXACTLY what we found on infected machines.

HTH
Steve


> One thing you must be careful of, even if you do remove the worm. after a
> reboot the worm will download a file from a server in the
philippinescalled
> WIN-BUGFIX.EXE, this file is another worm used to collect IP and password
> data from your computer and email it back to the creator of this worm.
This
> is similar but not the same as the clarissa virus, And users of Lotus
Notes
> and other non MS mail programs still have to worry about the other
effects.
> -Nate
> 

------------------------------------------------------------------------
High rates giving you headaches? The 0% APR Introductory Rate from 
Capital One. 9.9% Fixed thereafter!
http://click.egroups.com/1/3010/3/_/529958/_/957475731/
------------------------------------------------------------------------

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.