🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: demon.tech.pc
Article #22766

Re: Has anyone received the new "I LOVE YOU" Virus email yet ?

#22766
From: Andrew Brydon
Date: Sun, 07 May 2000 00:00
39 lines
2814 bytes
Once upon a time,  Michael Salem <4ms2u$ms@michaels.demon.co.uk> wrote
>Me:
>> >I expect a great surge of viruses (more accurately, worms) like Love 
>> >Letter, now the idea is in the public domain.
>> 
>Andrew Brydon wrote:
>
>> So were Melissa and Chernobyl something that didn't happen? Users are
>> inherently gullible/forgetful/naive/stupid (pick one or more) which
>> is why so many people still caught/transmitted LoveLetter only a year
>> after other major outbreaks. Same basic cause/mechanism. Nothing
>> learned!
>
>They didn't have the combination of extreme contagiousness and 
>harmfulness that Love Letter has. I read about Melissa in the 
>newspapers; I heard from several people who received LL. While it 
>would be nice to have an argument about this, and I'd like to be 
>proved wrong, indications so far is that LL has been an inspiration 
>and I'm right.
>
So far as I understand, the basic mechanism for infection was identical:
i.e. a attachment based executable that utilised Outlook's address book
and automated email facilities.

However, four main differences: Melissa ran via a MS Word macro, rather
than VBScript; Melissa had no specific damaging payload, apart from the
disruption to mail servers; the LoveLetter subject matter is more
likely to inspire people to open the attachment without thinking;
the LoveLetter attachment was not a Word file (as Melissa), which is
"known" to be dangerous, but *appeared* to be a TXT file, especially to
those with file extensions turned off (a common default).

Of course with logarithmic internet growth there are LOTS more
people on line compared to last year as well. Nevertheless, I am sure
a study of why LoveLetter appears to have been more widespread than
Melissa is probably worth a PhD or two to some researcher! <G>
-- 
Andrew Brydon
Life is just the beta-version of death
Technical Details
Message-ID: <fuQWABAF1ZF5EwF+@isbjorn.demon.co.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com> <QuUuoNAbbzE5EwsN@tgmead.demon.co.uk> <20000507.0015.12240snz@michaels.demon.co.uk> <qsrj2KAKFUF5EwSG@isbjorn.demon.co.uk> <20000507.1538.12253snz@michaels.demon.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1036bc,cc294bbc93feefe4
X-Google-Attributes: gid1036bc,public
From: Andrew Brydon <andrew@isbjorn.demon.co.uk>
Subject: Re: Has anyone received the new "I LOVE YOU" Virus email yet ?
Date: 2000/05/07
Message-ID: <fuQWABAF1ZF5EwF+@isbjorn.demon.co.uk>
X-Deja-AN: 620435007
X-NNTP-Posting-Host: isbjorn.demon.co.uk:158.152.189.129
References: <Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com> <QuUuoNAbbzE5EwsN@tgmead.demon.co.uk> <20000507.0015.12240snz@michaels.demon.co.uk> <qsrj2KAKFUF5EwSG@isbjorn.demon.co.uk> <20000507.1538.12253snz@michaels.demon.co.uk>
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 957739009 nnrp-09:4869 NO-IDENT isbjorn.demon.co.uk:158.152.189.129
Organization: PolarBearsForever
MIME-Version: 1.0
Newsgroups: demon.tech.pc