🚀 go-pugleaf

Once upon a time,  Dave Royal <droyal@hitechuk.demon.co.uk> wrote
>Hi Guys,
>
>I received an email this morning with the subject "I LOVE YOU" and a
>file attached called "LOVE.LETTER.FOR.YOU.TXT.vbs", which is a visual
>basic script that seems to do a lot of nasty things, namely self
>propagate through your personal email address book and as far as I can
>tell erase your HDD and does alot of HTML code writing, but not being to
>hot on VBS I'm not totally sure about the last bits. 
>A colleague who has seen the script informs me that that's what his
>interpretation of it was.

From the datafellowes page, it appears to rename a lot of legitimate
files, possibly hiding itself in them: mostly common web, music and
picture formats.

>Question : With me using Turnpike nothing auto runs on receipt, but
>would any email reader automatically run a VBS file ? if not, why has
>this been distributed in code form and not compiled into an EXE ?

I think even the truly insecure Outlook would still require a helpful
double-click first:

>I have the code in a zip file if any legitimate persons would like to
>read it and determine its exact nature. Please note that I will only
>send a copy to respected contributors to this NG.

Perhaps its strength is a) coming from someone you know and b) it is
NOT an exe which people are *just about* realising might be dangerous.

Be thankful you use a decent email package!
-- 
Andrew Brydon
Life is just the beta-version of death