Because several infected emails were sent to this list, I'm sending this as
an informational item. We have been infected by this virus, not from the
posts to this list, but from an email received from okstate.edu.
The best description of the virus is from CERT:
http://www.f-secure.com/v-descs/love.htm
This fix was posted to an Informix database list I subscribe to. I believe
this will only remove the virus, it will not repair the damage done to files
on the infected PC. (It adds a .vbs extension to certain types of files.)
_________________________
I have this reported fix for the pestilential thing. I haven't tried it yet,
but it does come from "a usually reliable source".
Here is the manual fix for the love letter virus.
1) Delete c:\windows\system\MSKernel32.vbs
2) Delete c:\windows\Win32DLL.vbs
3) Delete c:\windows\LOVE-LETTER-FOR-YOU.TXT.vbs
4) Delete the following registry keys
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current
Version\RUN\MSKernel32.VBS
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\RUN
Services\win32DLL.vbs
5) Change the start page of your Internet Explorer as it tries to run an
.exe.
Received on Thu May 04 2000 - 16:18:03 NZST