VBS.LoveLetter - echelon.vbs (CL)

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: VBS.LoveLetter

Sender:

Varies. Usually someone who knows you.

Subject:

!!! (CL)
[No Subject] (CD, BJ, AS)
C'è una cartolina per te! (CA)
fwd: Joke (BE)
Fwd: National Day 2001 Preview Pictures! (CU)
I Love You (CN)
MERRY X-MAS FROM MICROSOFT (CD)
Where are you? (CN)
US PRESIDENT AND FBI SECRETS (BJ, AS)
[String of 6 random characters] (CD)
(A randomly generated six letter word displayed in all capital
letters) (BJ. AS)
(The original file name that you received as an email attachment,
minus the last 7 characters)(CV)

Message:

Ciao, un tuo amico ti ha spedito una cartolina virtuale... mooolto
particolare! (CA)
Hi there, Pictures taken from 28th July National Day Preview (CU)
:-) MuCuX... (CL)
Recipient name > Eres algo especial...escríbeme  (English
translation: You are something special...Write to me) (CV)
Resume (BD)
STAR F**KERS INC.  EVEN TRENT KNOWS ITS TRUE (CD)
This is my pic in the beach! (CN)
VBsImplanter (CW)
(String of 10 random characters) (CD)

Attachment:

Cartolina.vbs (CA)
echelon.vbs (CL)
Joke.vbs (BE)
loveletterforyou.txt.vbs (CN)
resume.txt.vbs (BD)
start.vbs (CW)
(Random String).VBS (CD)
(Randomly generated four to eight letter file name ending with
.gif.vbs, .bmp.vbs, or.jpg.vbs). (BJ, AS)

Comments: A worm that sends itself to email addresses in the Outlook address bookand overwrites many files including (but not limited to) vbs, jpg, htm and com files.

Symptoms:


 Changes the default pages of Internet Explorer. (CD) 
 Overwrites files with the following extensions: .vbs, .vbe, .js,
.jse, .css, .wsh, .sct, .jpg, .jpeg, .mp3, and .mp2. Files with
extensions of .mp2 and .mp3 are hidden from the user by setting the
hidden directory attribute. (AS)

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update virus defs.
Run full system scan.
Delete any file that is identified as one of the variants of the virus.