Aliases: Email-Worm.VBS.Newlove (Kaspersky), VBS/NewLove@MM (McAfee), VBS.NewLove.A(2) (Symantec), VBS/Newlove.A (Avira), VBS/NewLove-A (Sophos),

In the wild: Yes

Destructive: Yes

Language: English

Platform: Windows

Encrypted: No

Description: 
VBS_NEWLOVE.A is a new Visual Basic Script worm with a very damaging payload. Once executed, this virus tries to spam itself to all users in the Microsoft Outlook address book. It is also polymorphic, since it changes its code with every new infection. New lines of random code are added every time the virus tries to spread itself. Therefore, the virus keeps increasing in size. This virus was obviously inspired by the success of VBS_LOVELETTER, but behaves differently. Outgoing email containing it can have a different Subject line and different file attachments. It zeroes out files in all directories found on the hard drives and mapped network drives. The affected files can no longer be retrieved. Due to this Windows does not function properly and will not start upon reboot.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 19, 2000 5:56:04 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.