Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||I love you, VBS/LoveLetter.CI-mm, Worm/LoveLetter.CI, Barok|
|Effects: ||It overwrites files in the affected computer and steals confidential user information.|
|Detection updated on:||Nov. 13, 2002|
|Country of origin:||PHILIPPINES|
|Family:||LOVELETTER (I LOVE YOU)|
Loveletter.CI is a worm that arrives in a message that aims to trick users into thinking they have received a love letter.
It spreads very rapidly by:
- Sending e-mail messages with the subject ILOVEYOU and an attachment called LOVE-LETTER-FOR-YOU.TXT.VBS.
- Automatically sending e-mail messages with the attachment LOVE-LETTER-FOR-YOU.HTM through IRC
Whenever Loveletter.CI infects a computer, it automatically sends itself to all the contacts in the Address Book.
This virus has very damaging effects:
- It deletes the content of all files with VBS, VBE, JS, JSE, CSS, WSH, SCT, HTA, JPG, JPEG, MP3 and MP2 extensions.
- It steals confidential information from the affected computer and sends it to the virus author. This could have particularly serious consequences for corporate networks.
A clear indication that you have received Loveletter.CI is an e-mail with the following characteristics:
kindly check the attached LOVELETTER coming from me
Another warning sign is a file called LOVE-LETTER-FOR-YOU.HTM sent through IRC.