F-Secure: Be Sure
Main
F-Secure Logo - Be Sure
Select local site


Privacy Policy
Legal Notices
Contact Us

F-Secure Virus Descriptions : LoveLetter.Q





NAME:LoveLetter.Q

Information about the original VBS/LoveLetter.A is available at: http://www.F-Secure.com/v-descs/love.shtml

This variant spreads in e-mail messages with the following content:

    Subject:    Yeah, Yeah another time to DEATH...
    Body:       This is the Killer for VBS.LOVE-LETTER.WORM.
    Attachment: Vir-Killer.vbs

VBS/LoveLetter.Q deletes all files with the extension ".zip" or ".rar". It also hides all files with the extension ".asm" or ".pas". After the original file has been deleted or hidden, the worm creates a copy of itself using the original filename and an additional extension of ".vbs".

This variant does not spread itself via mIRC.

[Analysis: Katrin Tocheva, Mikko Hypponen, Alexey Podrezov and Sami Rautiainen, F-Secure]