New "lovebug" virus causes major problems

Internet Business News, May 4, 2000

INTERNET BUSINESS NEWS-(C)1995-2000 M2 COMMUNICATIONS LTD

A computer virus that has been spreading around the world today (4 May) has been classified as being one of the 'meanest' since Melissa, according to a Swedish computer expert.

The virus, which spreads through e-mail messages with the subject line "I love you", is estimated to have reached thousands of computers in Sweden. Once the computer has been infected with the virus, which is located in an attachment in the message, the virus tries to send out copies of itself to all the addresses stored in a user's electronic address book. The virus also reportedly also tries to make changes to the registries in the computer and connect to chat channels.

According to initial reports, the virus uses a function common to Windows 98 and Windows NT. It is believed that the virus originated in the Philippines and it has been nicknamed "the killer from Manila" as well as "the love bug". In the virus file, a sender called 'Ispyder' has been found, as well as the text "Ihategotoschool" and this is thought to be the origin of the virus.

According to FSecure, the virus tries to destroy entries with the endings .vbs-, .vbe-, .js-, jse-, .css-, .wsh-, .sct- and .hta- and tries to add information to jpg-, jpeg-,mp3- and mp2- registries.

PDI-Consulting in Norway has announced that the company has released a free antidote against the virus and that it is available on the company's homepage at www.pdi.no. According to the company, it is the first time it has offered software free to Internet users. Mail essentials by GFI will also stop the virus and any varieties thereof, according to the company.

Software Plc has also reported that the company has developed a fix for the virus, which is thought to have infected 15% of the UK businesses. The company said that it received the virus at noon local time and had a fix against it 20 minutes later. There is software which will take care of the virus available for download at the company's website at www.software.plc.uk, according to Software Plc.

In Denmark, the Danish parliament Folketinget was infected with the computer virus. There have also been reports that Tele Danmark, a Danish telecommunications provider, as well as Sonofon and Mobilix, two telephone companies, have been infected. The virus was reportedly discovered around 11am local time and the extent of the damage it has done is not yet known. Neither is it known how the virus got into the system as all employees and MPs were warned against it earlier in the day.

In Finland, the virus hit the computers of the consumer board (konsumentverket), the HEX and STT, the Finnish news agency.

NRK, the Norwegian broadcasting corporation, was reportedly one of the first Norwegian computers to be hit by the virus today. NRK has reportedly found out where the infected message came from. Estimates have been made that tens of thousands of Norwegian users have been infected by the virus.

In Sweden, the web server of the Kristiansand municipality has been affected by the virus and although the municipality was trying to solve the problem, there were reportedly problems with its computers.

The servers of British companies as well as the parliament have also been infected with the virus. The House of Commons has been described as the latest victim of the vicious virus. Symantec, an anti-virus company, has reportedly released an update which deals with the virus.

((Comments on this story may be sent to info@m2.com))