Anti-virus companies ‘ambulance chasing' over Love variants

Although "NewLove" hasn't wreaked the havoc its predecessors did, the new Visual Basic Script worm is still potent, as it attempts to catch its victims off-guard by changing the subject field of the e-mail it travels in.

Also, it draws the name of the attached worm file at random by picking up a file name from a user's list of recently used files. If launched, the worm immediately e-mails itself through a Microsoft Outlook address book and deletes all accessible files on the local hard drive and any attached network. Yet the damage control initiated by the previous week's events appears to have had an effect worldwide on awareness of how to deal with the worm. "It looks like most people woke up early to this and warned just about everybody they knew," said IDC analyst Chris Christansen on the weekend.

Microsoft are due to make available a "patch" for the .VBS worm, a measure which should restrict the NewLove worm from spreading. A researcher with the Gartner Group, Chris Le Tocq, said that the spate of worm attacks proved how dependent the world is on a homogenous platform, making it vulnerable to these "malicious code bombardments". "I think that we're a technology society that's attempting to find its balance between programmability and security, said Le Tocq. It has been advised that Windows users disable their operating system's scripting host, as a measure against the worm or any variants until the .VBS patch is released, a measure Le Tocq agrees with. "Right now, when Joe teenager can kill your systems at a whim, I'd say on a business functionality balance, do it."

But the anti-virus industry itself has come under criticism, with suggestions raised that it is using hype, fear and sensationalism to market itself alongside warning the public. Quoted in WIRED, Dan Schrader, chief security analyst at Trend Micro said "Anti-virus companies have always been seen as ambulance chasers, and sometimes, it's true. Because this is an industry that has been built on hype and alerts and pretensions of being good citizens, the industry doesn't have a lot of credibility."

An Australian member of the group Halcon last week distributed a virus script to select media to demonstrate the ease with which the virus can be constructed using Microsoft's Visual Basic Script. "Valiant", the script's author, expressed some suspicion via an interview granted to WIRED that his script may have been used to create the latest variant of the worm, though attempts to contact Valiant to confirm his comments were unsuccessful today.

Virus Updates

F-Secure have a page with updates and some screenshots for users wanting to know what the virus looks like when contained in an email message. Sophos, Symantec and McAfee all have up to date virus information pages. For alternative opinions on events, visit the Computer Virus Myths page.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Miguel D'Souza

PC World
Show Comments

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?