1. /
  2. Security Response/
  3. VBS.LoveLetter.CA

VBS.LoveLetter.CA

Risk Level 2: Low

Updated:
February 13, 2007 11:35:32 AM
Also Known As:
VBS.LoveLetter.Variant, I-Worm.Loveletter, VBS/LoveLetter@MM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

VBS.LoveLetter.CA spreads using Microsoft Outlook. It attempts to email itself to all contacts that have not yet been targeted by the worm. The payload of this worm overwrites files of certain extensions with its own code.

NOTE: Virus definitions prior to March 2, 2001 detected this as VBS.LoveLetter.Variant.

The subject is one of the following:
The body of the email is one of the following:
  • STAR F**KERS INC.  EVEN TRENT KNOWS ITS TRUE
  • [String of 10 random characters]
  • [No Body Text]


Antivirus Protection Dates

  • Initial Rapid Release version September 29, 2000
  • Latest Rapid Release version August 20, 2008 revision 017
  • Initial Daily Certified version September 29, 2000
  • Latest Daily Certified version August 20, 2008 revision 016
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: Andre Post

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver