| Home | Schools Links | Virus List | Add a School | Change a Link | Dead Link |
| Link to us | Financial Aid | Free E-mail | Guestbook | Cool Links | Tell A Friend |
|
|
If your School has a Schools Alumni Page let us know | ||||
|
||||||||||||||||||
  |
VBS/Loveletter.ar
Aliases
VBS_Calendarios
|
This is a variant of the VBS/Loveletter family. It contains a date activated payload of sending a copy of itself via MAPI email. This Internet worm may arrive as an email message in the following format: Subject = "You gotta check
it out"
The attachment contains the Internet worm. If this Internet worm is run intentionally or accidentally, it will install to the local system in various locations and run at Windows startup. It will check the system date each time and if the date is matched, it will activate an email send routine. Existence of the following
files on the local system:
Modifications of the system registry and/or WIN.INI file as mentioned below. Modification of the MIRC.INI file as mentioned below. If this Internet worm is run intentionally or accidentally, the following changes will occur to the local system: * copy itself to the following
locations
* modify the registry in the following locations in order to load at Windows startup HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry = [windows]\winsys.vbs HKLM\Software\Microsoft\Windows\CurrentVersion\Run = [windows\system]\winsys.vbs" HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices = [temp]\winsys.vbs HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\WinLoad = [windows\system]\sexpic.jpg.vbs * modifies the WIN.INI file to load the Internet worm at Windows startup load = [windows\system]\kernel.vbs
* modifies the SYSTEM.INI file to load the Internet worm at Windows startup shell = Explorer.exe explorer.vbs * modifies MIRC.INI to send "sexpic.jpg.vbs" when connecting to IRC channels * checks the system date - if the day is either the 10th, 20th or 30th, activates email send routine to forward itself to everyone in the address book using the format mentioned in the 'Characteristics' section | ||||||||
|
|
|||||||||
| [an error occurred while processing this directive] |
|
Howdy!!! Welcome to the McCann's PooR Farm I'm not with any school or schools, Just a disable grandpa with 17 grand kids, 1 Great grand Kid Sorry! about all of the adds, Our Cost just keeping going up. Please click on one of them and help us out. or Send $1.00 U.S. to: McCann's Poor Farm 20509 Lawrence 2207 Aurora, Mo. 65605-7275 Thank You, Junior McCann Webmaster and the GrandKids See what the experts have to say about the McCann's Poor Farm Web Page Legal Disclaimer - We Are in no way connected with any School and or Companies linked to this page. Links are provided as a courtesy only. |
Argentina, Australia, Austria, Belarus, Belgium, Bermuda, Brazil, Brunei Darussalam, Bulgaria, Canada, Chile, Columbia, Costa Rica, Croatia, Croatia/Hrvatska, Czech Republic, Denmark, Dominican Republic, Ecuador, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, Hong Kong, Hungary, Iceland, India, Indonesia, Ireland, Israel, Italy, Japan, Jordan, Korea, Korea, Republic of, Latvia, Lebanon, Lithuania, Luxembourg, Macedonia, Malaysia, Mexico, Moldova, Netherlands, New Calendonia, New Zealand, Norway, Old style Arpanet, Papua New Guinea, Peru, Philippines, Poland, Portugal, Romania, Russian Federation, Saudi Arabia, Singapore, Slovakia, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, Turkey, Uganda, Ukraine, United Arab Emirates, United Kingdom, United States, Uruguay, USA Government, USA Military, Viet Nam |
|
Tell A Friend about this Page |
Tell me when this page is updated |
|
|
Put a Link on your Web Page
- Legal Disclaimer - |
