The Love Bug strikes

PCs across the globe were hit by a new virus last month as the so-called Love Bug emailed itself to millions of internet users.

The virus, which claims to be a love letter from a friend, infects and destroys multimedia files on execution, including JPEG images and MP3s, turning them into a copy of the VBS script. It then sends itself out to other users whose details are held in your Outlook address book.

Attached to the emails, which carry the subject title ILOVEYOU, is a file called LOVE-LETTER-FOR-YOU.TXT.vbs. The .vbs extension means the file is a Visual Basic Script, a program written in a language developed by Microsoft, and running it unleashes the virus.

Many have unwittingly run the virus through Outlook's preview pane, which can automatically start scripts.

The virus also infiltrates the Windows Registry and other important system files, and changes the default page for Internet Explorer to download what is believed to be a password-stealing program called WIN-BUGSFIX the next time you boot up.

Some estimates have put the worldwide cost of the virus at up to $10bn, much of that due to lost productivity as email servers were shut down to prevent the spread.

The program is believed to have been written by a Filipino student, and the FBI and Philippine authorities have joined forces to catch the culprit.

At the time of writing, the Philippine National Bureau of Investigation had four possible suspects, including one Onel de Guzman, who admitted that he may have caused the spread of the virus "by accident".

The Love Bug is reminiscent of last year's Melissa virus, and antivirus experts believe that copycat mutations have already been released onto the internet.

ARE YOU INFECTED?

For a quick check to see if your system might have become infected with the Love Bug virus, follow these steps.

1. Go to the Start Menu, select Find and then Files and Folders.
2. Type *.vbs into the Name part of the search box that appears and click Find Now.
3. If any files appear with a name that features an extra .vbs extension, such as filename.jpg.vbs or filename.mp3.vbs, this is a sign that you may have caught the bug. If nothing appears, or just Visual Basic Scripts that you know should be on your system, then stop there.
4. If you think you may be infected, download the Love Bug antidote from http://www.vnunet.com/download/1101173

NB: Another sign of the virus is that your Internet Explorer default home page will have been changed to download the WIN-BUGSFIX file. To check this, go to the Start Menu, select Settings and then Control Panels. Double-click Internet Options and check the home page details.

See also:

Valentine's Day virus massacre

Don't be fooled by a promise of love  13 Feb 2002

Virus costs could hit record high

Cleaning up viruses cleans out wallets  03 Sep 2001

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!