Anti-virus companies ‘ambulance chasing' over Love variants

Although "NewLove" hasn't wreaked the havoc its predecessors did, the new Visual Basic Script worm is still potent, as it attempts to catch its victims off-guard by changing the subject field of the e-mail it travels in.

Also, it draws the name of the attached worm file at random by picking up a file name from a user's list of recently used files. If launched, the worm immediately e-mails itself through a Microsoft Outlook address book and deletes all accessible files on the local hard drive and any attached network. Yet the damage control initiated by the previous week's events appears to have had an effect worldwide on awareness of how to deal with the worm. "It looks like most people woke up early to this and warned just about everybody they knew," said IDC analyst Chris Christansen on the weekend.

Microsoft are due to make available a "patch" for the .VBS worm, a measure which should restrict the NewLove worm from spreading. A researcher with the Gartner Group, Chris Le Tocq, said that the spate of worm attacks proved how dependent the world is on a homogenous platform, making it vulnerable to these "malicious code bombardments". "I think that we're a technology society that's attempting to find its balance between programmability and security, said Le Tocq. It has been advised that Windows users disable their operating system's scripting host, as a measure against the worm or any variants until the .VBS patch is released, a measure Le Tocq agrees with. "Right now, when Joe teenager can kill your systems at a whim, I'd say on a business functionality balance, do it."

But the anti-virus industry itself has come under criticism, with suggestions raised that it is using hype, fear and sensationalism to market itself alongside warning the public. Quoted in WIRED, Dan Schrader, chief security analyst at Trend Micro said "Anti-virus companies have always been seen as ambulance chasers, and sometimes, it's true. Because this is an industry that has been built on hype and alerts and pretensions of being good citizens, the industry doesn't have a lot of credibility."

An Australian member of the group Halcon last week distributed a virus script to select media to demonstrate the ease with which the virus can be constructed using Microsoft's Visual Basic Script. "Valiant", the script's author, expressed some suspicion via an interview granted to WIRED that his script may have been used to create the latest variant of the worm, though attempts to contact Valiant to confirm his comments were unsuccessful today.

Virus Updates

F-Secure have a page with updates and some screenshots for users wanting to know what the virus looks like when contained in an email message. Sophos, Symantec and McAfee all have up to date virus information pages. For alternative opinions on events, visit the Computer Virus Myths page.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Miguel D'Souza

PC World
Show Comments

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers


This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang


It really doesn’t get more “gaming laptop” than this.

Jack Jeffries


As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr


The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?