Net-Sec mini letter 
Issue 12 - 06.05.2000 
http://net-security.org 

Yes, some more information on the Love Letter worm... Usually we don't post 3 mails in 3 days, but situation over the Love Letter is important so... :) 


>From CRN.com 
Yet another variation of the Love Letter worm has surfaced, disguised as a virus warning instead of a message of affection. 
Instead of "I Love You" in the subject line, this worm-containing e-mail reads "Dangerous Virus Warning" according to antivirus software vendor McAfee, a unit of Network Associates Inc., based here. The worm works in a similar fashion to the love bug, a McAfee spokeswoman said. When the e-mail's attachment is opened, the bug uses Microsoft Outlook to send copies of itself to addresses in the user's address book. 
Link - http://www.crn.com/dailies/digest/breakingnews.asp?ArticleID=16423 


>From Wired.com 
According to a professor from University of Stockholm, the alleged writer of Love Letter worm, has been identified as a male, Philippines-based, German student in his 20s... 
Link - http://www.wired.com/news/technology/0,1282,36168,00.html 


>From Antivirus.com 
Trend Micro has an interesting feature called "Trend World Virus Tracking Center". Java apllet provides you information about real time tracking on virus infections all over the world. And yes, Love Letter virus is the top one on every continent. 
Link - http://wtc.trendmicro.com/wtc/ 


2 scripts written to help you fight Love Letter worm 
http://www.net-security.org/cgi-bin/download.cgi?lover-killer.vbs 
http://www.net-security.org/cgi-bin/download.cgi?lovecleaner.vbs 


Doug Muth's report on Love Letter worm (thanks Doug for submitting it) 
http://www.claws-and-paws.com/virus/articles/lovebug.shtml 


>From Salon.com 
Shares of Web security providers performed well on Friday as investors were alarmed by this week's computer viruses. 
Copycat viruses of the "Love Bug" which crippled electronic mail around the world on Thursday added to losses which have totaled more than $2.6 billion so far 
Link - http://www.thestandard.com/article/display/0,1151,14854,00.html 


Once again for all the comments and info from subscribers of HNS mailing list. Use the following mail for all your questions or new comments... 

HNS staff 
staff@net-security.org