1. /
  2. Security Response/
  3. VBS.LoveLetter.BM

VBS.LoveLetter.BM

Risk Level 2: Low

Discovered:
September 21, 2000
Updated:
February 13, 2007 11:50:36 AM
Also Known As:
VBS.President.Worm, VBS/Columbia, VBS.LoveLetter.Variant, VBS.Plan.B
Type:
Worm, Virus

VBS.LoveLetter.BM spreads using Microsoft Outlook. It attempts to email itself to all contacts who have not yet been targeted by the worm. The payload of this worm overwrites files that have certain extensions.

Definitions prior to February 26, 2001 detected this as VBS.Plan.B. Definitions prior to September 21, 2000 detected this as Bloodhound.VBS.Worm.

The subject line is one of the following:
  • US PRESIDENT AND FBI SECRETS =PLEASE VISIT = (http://WWW.2600.COM)<=
  • [String of 6 random characters]
  • [No Subject]

The body of the email is one of the following:
  • VERY JOKE..! SEE PRESIDENT AND FBI TOP SECRET PICTURES..
  • [String of 10 random characters]
  • [No Body Text]


Antivirus Protection Dates

  • Initial Rapid Release version September 21, 2000
  • Latest Rapid Release version March 3, 2008 revision 035
  • Initial Daily Certified version September 21, 2000
  • Latest Daily Certified version March 3, 2008 revision 037
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: Gor Nazaryan

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver