full-disclosure - RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu May  4 15:39:22 2006
From: petervdh at orange.net (Peter van den Houten)
Subject: RE: Panda Antivirus Enterprise Secure,
 Norton Antivirus 2005 and the virus "I Love You"

My ISP caught it:
-----------------
The Orange virus filtering service discovered a virus or unauthorised 
code (e.g. spyware or trojan) in an email sent to you.

Message sender:       full-disclosure-bounces@...ts.grok.org.uk
Message recipient(s): petervdh@...nge.net
Message subject:      [Full-disclosure] RE: Panda Antivirus Enterprise 
Secure,
Message date:         Thu, 4 May 2006 13:32:26 +0200 (CEST)
Message size:         8.84Kb

The e-mail contained this virus or unauthorized code:
	>>> [VBS/LoveLetter-MM]

> On 5/4/06, *Joxean Koret* <> wrote:
> 
>     Sorry, the email was sended without the attachment.
> 
>     ---
>     Regards,
>     Joxean Koret
> 
>      > Attached goes a working "I Love You" virus in which
>      > I
>      > changed ONLY the variable "dirsystem" with the name
>      > "kk2" (The file attached have the extension
>      > ".txt.gz",
>      > otherwise, with the .vbs extension the file will be
>      > locked by all the most populars anti-viral
>      > toolkits).
> 
>     Disclaimer:
>     ~~~~~~~~~~~
> 
>     The information in this advisory and any of its
>     demonstrations is provided "as is" without any
>     warranty of any kind.
> 
>     I am not liable for any direct or indirect damages
>     caused as a result of using the information or
>     demonstrations provided in any part of this
>     advisory.
> 
>     ----------------------------------------------------------------
> 
>     Contact:
>     ~~~~~~~~
> 
>     Joxean Koret at joxeanpiti<<<<<<<<@>>>>>>>>yah00<<<<<<dot>>>>>es