Virus " I LOVE" Disinfection

[David Johnson]

I would like to share our security office's information about this virus.

If you have Viruscan from McAffee  you can rest a little easier today,  The
solution below works with McAffee's LATEST Viruscan software for the PC.
NOTE: as far as we know, MACS are NOT infected. 

THE FOLLOWING RELEASE IS TO THE MIT CAMPUS    for your information. 

<<<There is a new virus that is being spread rapidly via Microsoft
Outlook and other MAPI mail programs.  It comes in an e-mail with the
subject "I love you".

This one, unfortunately, is not a hoax.  We have confirmed reports of
it on campus and also at Babson College.

If you get mail with that subject, please delete it.  Once infected
the virus will send itself to everyone on your address list and also
delete Visual Basic programs, and change jpg graphic files.

An extra.dat file which will detect the virus is now available at
http://web.mit.edu/security/www

When you select  the link you will see a page of characters ( the
signature used to identify the virus).  Use the File -> Save command
to save it to the directory containing your anti-virus software.  That
usually is:

c:\program files\network associates\viruscan

This will automatically add this description to the list usually used
by the software.

Where we are now.  First, this is a PC virus it updates registry
information and uses Microsoft Outlook and other MAPI mailers to send
out its copies.  It does not infect MACS.

We have over 10 departments on campus with some infections. It is
still spreading world-wide so expect more mail coming in.

Once infected it will erase jpg graphic files, VBS (Visual Basic)
files and send passwords to a site in the Phillipines. It odes other
things too like change Internet Explorer links.

So far we do not have a disinfector.  As soon as it is available I
will let everyone know.



Jerry Isaacson
MIT Information Security Office>>>>


If you have any questions, please let me know.






At 10:40 AM 05/04/2000 -0700, you wrote:
>
>I forward a message about virus ILOVEYOU disinfection.
>
David  Johnson  
Library Technology Consultant        	617-253-9327
MIT Libraries 			Room 14-0615
				77 Mass Ave  Cambridge, MA   02139