AbacoToday.com - ABACO BAHAMAS
The
Abaco
Message
Board
ABACO > MESSAGE BOARD > THE ARCHIVES
Note: Use Your Back Button to return to the Archive Page
HOME

What's New

Msg. Board

ScrapBook

Boating Page

Ferries

Weather
 Tides

Lodging
 Wood Cay
 Green Turtle
 Treasure Cay
 Great Guana
 Man-O-War
 Eastern Shore
 Marsh Hbr.
 Sugarloaf
 Hope Town
 Elbow Cay
 Lubbers
 Cherokee
 Causarina

On the Water

Boating
Fishing Guides
Marinas

Real Estate
 Agencies
 By Owner

Information
 Abaco Journal
 Ferries
  Weather

Here's the details..........


[ Follow Ups ] [ Abaco Message Board ]

Posted by Billy on May 04, 2000 at 14:38:43:

In Reply to: Warning! "I Love You" Virus posted by AbacoPeach on May 04, 2000 at 13:42:45:

This is from the ABC News website. It contains just about everything important you need to know. PLEASE READ as it also can multiply through specific types of chat rooms.

May 4 — A massively destructive virus that clogs networks and erases graphics and music files has infected up to 90 percent of the corporations in the world, a virus expert said today.

Computer users who receive the e-mail should just delete it without opening the attachment, and they won’t be infected.

The virus apparently originated in the Phillippines and hit Europe and Asia early this morning, said Eric Chien, chief researcher at the Symantec Antivirus Research Center in the Netherlands.

Symantec and other virus companies have already come up with vaccination and cure programs, but their Web sites were swamped by users this morning. Clogs Up Networks The virus uses similar tricks to last year’s feared Melissa virus, but it’s even more widespread and destructive, Chien said.

First, “loveletter” resets a user’s Internet Explorer Start Page to a Web page containing an executable file. The page has since been taken down, Chien said. He said researchers are unsure what the executable file does when launched.

Then, the virus searches for all files with the extensions JPG, JPEG, MP2, and MP3 — the most popular graphics and sound formats — as well as other, more obscure extensions. It erases the files and replaces them with copies of itself under the same name, with the extension VBS tacked on.

Chat room aficionados are extra-vulnerable. The virus infects the popular mIRC chat program, so the next time a user starts chatting, the virus goes out to everyone in the room.

Finally, the program multiplies by hijacking Microsoft Outlook and e-mailing itself to everyone in an Outlook address book.

Anyone running Windows 98, Windows NT 4.0, or both Windows 95 and Internet Explorer 5.0 is vulnerable, Chien said. The virus needs Microsoft Outlook to spread. Macintosh and Linux users are not vulnerable.

The virus spreads through corporate firewalls because most are not configured to reject attachments with a .txt.vbs extension, a relatively uncommon type of file, information systems managers said.

Bored Student? Two lines within the virus identify the author as “Spyder,” part of the “@GRAMMERsoft Group” from Manila, Philippines and say “I hate go to school.” He also offers his opinion of his work: “simple but I think this is good ...”

“The group name is not familiar,” said security consultant Brian Martin. And “Spyder” is a common name in the electronic underground. But the virus contains an e-mail address that should make it “easy to track him,” Martin said.

Officials at Spyder’s e-mail provider, mail.com, are “working on the problem,” a mail.com spokeswoman said.

The virus “appears to have been written by a student, probably 14 to 28 years old and probably male as well,” Chien said, citing code within the virus and past experience with virus writers.

“He seemed to just write it because he was bored. He probably has no idea he’d cause so much chaos,” Chien said.

But the writer does have a good idea of psychology. By adding the phrase “kindly check the attached LOVELETTER coming from me” to the e-mails, he makes users think it might be a personal message.

“If you send an attachment with, ‘I’m a virus, run me,’ people won’t run it. But with this, people say, ‘oh, look, it’s a love letter, I think I’ll open it,’” Chien said.

The answer, security experts said, is simple: Never, ever, ever, open an attached file that comes as a surprise, no matter who it seems to be from, or how “loving” it seems to be.

Stunning Spread Experts said they were stunned by the speed and wide reach of the virus.

“Many, many tens of thousands of machines have been infected by it,” said Symantec spokesman Richard Saunders.

In the U.S., the virus has affected the Pentagon, the federal Department of Agriculture, the Florida Lottery, the Wisconsin Legislature, and media organizations including Time Warner Inc., according to employees of affected companies and officials of anti-virus companies.

“It is literally anybody who is running Microsoft Outlook, and that is the most common e-mail client in the world,” said Richard Jacobs, president of anti-virus firm Sophos.

The bug appeared in Hong Kong late in the afternoon, spreading throughout e-mail systems once a user opened one of the contaminated messages. It later moved into European parliamentary houses and through the high-tech systems of big companies and financial traders.

“I have to tell you that, sadly, this affectionate greeting contains a virus which has immobilized the House’s internal communication system,” said Margaret Beckett, leader of Britain’s House of Commons. “This means that no member can receive e-mails from outside, nor indeed can we communicate with each other by e-mail.”

Companies in Denmark, Norway, the Netherlands and Switzerland were also hit. ABCNEWS’ Sascha Segan and The Associated Press contributed to this story. Curing the Virus May 4 — All the major anti-viral companies have released free trial versions of their software that can fix the new virus. Try going to www.symantec.com, www.mcafee.com, or www.sophos.com.

You’ll be cured, but you won't be able to get your JPEG and MP3 files back unless you've made backups.

To prevent further infections by copycat viruses, Richard Jacobs of Sophos recommends you turn off your Windows Scripting Host. In Windows 98, that means go to your Start Menu and choosing Settings, then Control Panel. Double-click on the Windows Components control panel, and then choose the Accessories option. Uncheck the box for Windows Scripting Host, which should be the last one on the list.

Melissa and ILOVEYOU both use Windows Scripting Host to propagate, but very few users need it in their day-to-day lives, Jacobs said.

The number-one lesson, antiviral experts agree, is to scrutinize e-mail closely.

“It’s so important for people to think about what they’re opening in their e-mail. Very few people get large numbers of love letters via email,” Jacobs said.




Follow Ups:



Copyright © 1996-2003, AWS, Ltd., Abacom
Marsh Harbour, Abaco, Bahamas
All rights reserved.
webmaster@coconuttelegraphs.net