First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.
New Worm says I love you still
- — 19 May, 2000 17:05
However this time, report Computer Associates, the filename and extension are chosen randomly by the worm from the infected computer's "Windows Recently Used File" list, changing the filename when the virus is passed on. Thus both the subject and the name of the attachment change constantly, each time the virus is transmitted. This can convince the receiver that the email is genuine and can be opened.
The worm then sends itself to all entries in the Outlook Explorer address book, renaming all files on a computer's drive to the ".vbs" extension, setting the file size to zero.
Computer Associates reports that the worm grows as it is spread, increasing its potenial to clog email networks and potentially leaving mail servers vulnerable to collapse.
Announcing the latest variant, as well the availability of their update, Frances Ludgate, Business Manager of Security Solutions at Computer Associates said that "There seems to be no love lost by these variants as we continue to see the aftermath of the 'I LOVE YOU' Worm. Unfortunately, with destructive payloads inside this version, the stakes and costs are much higher than before."
Computer Associates has information on this latest version of the Love Bug worm at www.ca.com/virusinfo