Article ID: 262238
Article Last Modified on 1/27/2007
APPLIES TO
- Microsoft Outlook Express 5.5
- Microsoft Outlook Express 5.01 Service Pack 1
- Microsoft Outlook Express 5.0
- Microsoft Outlook 2000 Standard Edition
This article was previously published under Q262238
For information about the differences between Microsoft Outlook Express and Microsoft Outlook e-mail clients, click the following article number to view the article in the Microsoft Knowledge Base:
257824 OL2000: Differences Between Outlook and Outlook Express
SYMPTOMS
This article describes how to detect the ILOVEYOU virus if it is on your computer.
After you open a file with "FW: ILOVEYOU" in the Subject box, you may not be able to locate .jpg or MP3 files on your computer, and your Microsoft Internet Explorer home page may have changed.
The ILOVEYOU message contains the following text:
kindly check the attached LOVELETTER coming from me.
The message also has the Love-letter-for-you.txt.vbs file attached to it.
If you open the message, it does not open the worm virus. However, if you run the attached script, the file infects your computer.
IMPORTANT: This virus can also be transmitted through infected files and chat programs.
CAUSE
The LOVEBUG virus is a worm virus that affects computers that are running Outlook, Internet chat programs, or using file sharing and forwarding.
This virus also scans your computer's memory for passwords, and then sends your passwords to a Web site that no longer exists. The worm then mails itself to all of your contacts in your Outlook address book. The worm can also damage files with the following file extensions:
.vbs
.vbe
.js
.css
.wsh
.sct
.hta
.jpg
.jpeg
.mp2
.mp3
The worm uses Messaging Application Programming Interface (MAPI) calls to the Outlook program, and creates messages by iterating through all of your addresses in the Outlook Address Book. The worm marks these recipients in the registry so that the mail is only sent to the addresses once.
RESOLUTION
To prevent this worm virus from infecting your computer and spreading further, update your antivirus software. For information and assistance with upgrading your antivirus software, contact your antivirus software manufacturer.
The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.
How to Tell If Your Computer Is Infected with the Virus
Search all of your hard drives for the Love-letter-for-you.txt.vbs file:
- Click Start, click Search, and then click Files or Folders.
- In the Named box, type love-letter-for-you.txt.vbs.
- Make sure that all of your hard drives are selected in the Find in box, and then click Find Now.
REFERENCES
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
282832 Information About the VBS.LOVELETTER Worm Virus
Additional query words: bug
Keywords: kbprb KB262238
