Article View: demon.tech.pc
Article #22766Re: Has anyone received the new "I LOVE YOU" Virus email yet ?
From: Andrew Brydon
Date: Sun, 07 May 2000 00:00
Date: Sun, 07 May 2000 00:00
39 lines
2814 bytes
2814 bytes
Once upon a time, Michael Salem <4ms2u$ms@michaels.demon.co.uk> wrote >Me: >> >I expect a great surge of viruses (more accurately, worms) like Love >> >Letter, now the idea is in the public domain. >> >Andrew Brydon wrote: > >> So were Melissa and Chernobyl something that didn't happen? Users are >> inherently gullible/forgetful/naive/stupid (pick one or more) which >> is why so many people still caught/transmitted LoveLetter only a year >> after other major outbreaks. Same basic cause/mechanism. Nothing >> learned! > >They didn't have the combination of extreme contagiousness and >harmfulness that Love Letter has. I read about Melissa in the >newspapers; I heard from several people who received LL. While it >would be nice to have an argument about this, and I'd like to be >proved wrong, indications so far is that LL has been an inspiration >and I'm right. > So far as I understand, the basic mechanism for infection was identical: i.e. a attachment based executable that utilised Outlook's address book and automated email facilities. However, four main differences: Melissa ran via a MS Word macro, rather than VBScript; Melissa had no specific damaging payload, apart from the disruption to mail servers; the LoveLetter subject matter is more likely to inspire people to open the attachment without thinking; the LoveLetter attachment was not a Word file (as Melissa), which is "known" to be dangerous, but *appeared* to be a TXT file, especially to those with file extensions turned off (a common default). Of course with logarithmic internet growth there are LOTS more people on line compared to last year as well. Nevertheless, I am sure a study of why LoveLetter appears to have been more widespread than Melissa is probably worth a PhD or two to some researcher! <G> -- Andrew Brydon Life is just the beta-version of death
Technical Details
Message-ID:
<fuQWABAF1ZF5EwF+@isbjorn.demon.co.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com> <QuUuoNAbbzE5EwsN@tgmead.demon.co.uk> <20000507.0015.12240snz@michaels.demon.co.uk> <qsrj2KAKFUF5EwSG@isbjorn.demon.co.uk> <20000507.1538.12253snz@michaels.demon.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1036bc,cc294bbc93feefe4 X-Google-Attributes: gid1036bc,public From: Andrew Brydon <andrew@isbjorn.demon.co.uk> Subject: Re: Has anyone received the new "I LOVE YOU" Virus email yet ? Date: 2000/05/07 Message-ID: <fuQWABAF1ZF5EwF+@isbjorn.demon.co.uk> X-Deja-AN: 620435007 X-NNTP-Posting-Host: isbjorn.demon.co.uk:158.152.189.129 References: <Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com> <QuUuoNAbbzE5EwsN@tgmead.demon.co.uk> <20000507.0015.12240snz@michaels.demon.co.uk> <qsrj2KAKFUF5EwSG@isbjorn.demon.co.uk> <20000507.1538.12253snz@michaels.demon.co.uk> X-Complaints-To: abuse@demon.net X-Trace: news.demon.co.uk 957739009 nnrp-09:4869 NO-IDENT isbjorn.demon.co.uk:158.152.189.129 Organization: PolarBearsForever MIME-Version: 1.0 Newsgroups: demon.tech.pc