General Information


VBS.LOVELETTER.A is a VBScript virus, first found widely -- very widely -- on May 4. Like Melissa, LOVELETTER.A uses MAPI calls to Microsoft Outlook to forward itself to all the addresses in the Microsoft Outlook Address Book. The worm marks these recipients using the registry in an attempt to send the mail only once. The e-mail message contains an attached file called "LOVE-LETTER-FOR-YOU.TXT.vbs" to all email addresses in the address list. This e-mail will have the following form:

      From: <sender>
      To: <recipient>
      Subject: ILOVEYOU
      Date: Thu, 4 May 2000 09:38:11 -0400
      MIME-Version: 1.0

      kindly check the attached LOVELETTER.A coming from me.

      <Attached File: LOVE-LETTER-FOR-YOU.TXT.vbs>

Note the subject line, message body, and attached file name above; this is from the original virus but variants have reportedly already started to appear. The attached file is a VisualBASIC script; as with all viruses, the "bad code" is inert unless executed.

Return to Menu