piclist 2000\05\05\151637a >
Thread: New e-mail virus [OT][ADMIN]
www.piclist.com/techref/index.htm?key=
flavicon
face BY : Dan Creagan email (remove spam text)



Actually, it does replace common picture formats, but it also renames them
from <filename.jpg> to <filename.jpg.vbs>

Normal picture viewers would not be affected and would not spread the virus.
What would happen in Windows is a GUI user would try to click on the
filename (from My Computer or Explorer) thinking that it was the old file
(not noticing the incorrect extension). Windows would see the vbs extension
and run the scripting host - which would infect the system.  If the (l)user
would attempt to load the file from the file dialog of, say, Paint Shop Pro,
it would just complain it didn't understand the file format.

I think you have to almost try to get this sucker to infect your system.
Amazing that it caused so much damage.  Are we all so starved for
affection/ego trips that we absolutely MUST open something as lame as
ILOVEYOU.txt.vbs ????

=============================================

In the case of this worm, it replaces every JPG it can find with a copy of
it's
vbe.  If you have JPG viewer that executes VBEs (does such a thing exist?),
and
someone sent you a worm effected JPG, you'd be infected.

-Mike

<GLEPKNKJNNHLBEGNJOOMKECKCHAA.dcreagan@scholars.bellevue.edu> 7bit

In reply to: <3136A952E020D211882000805FE687B1014444FA@nssmx2.cpd.harris.com>
See also: www.piclist.com/techref/index.htm?key=
Reply You must be a member of the piclist mailing list (not only a www.piclist.com member) to post to the piclist. This form requires JavaScript and a browser/email client that can handle form mailto: posts.
Subject (change) New e-mail virus [OT][ADMIN]

month overview.

new search...