ILOVEYOU病毒:别让它爱上您的计算机!

2015/02/03

ILOVEYOU virus is a computer worm that can replicate itself a separate program. It does this through an e-mail titled “ILOVEYOU” spread, and with an attachment “LOVE-LETTER-FOR-YOU.TXT.vbs”. The VBS extension is the language used by hackers to create a worm: Visual Basic Scripting. Vbs extension will normally be hidden Windows computer, causing the user uninformed think this is a plain text file.

Open the attachment immediately activate the Visual Basic script. The worm infected not only damage the local machine and cover music and image files are also automatically replicate itself and send a letter to all Outlook contacts list, large-scale spread, resulting in paralysis of corporate mail server. ILOVEYOU virus and the Melissa virus (beautiful virucidal) The biggest difference is beautiful virucidal only send spam to shallow 0 list address book, but ILOVE but no limit on the number of outgoing e-mail, spread faster kill rate than beautiful, destructive and more powerful.

ILOVEYOU virus is called for older versions of Windows, including Window 95/98/200 and Windows NT 4.0. Windows random directory containing JPG, VBS, JS, JSE, CSS, WSH, SCT, HTA, MP3, MP2’s various extension files are vulnerable coverage.

 

The following is a broad ILOVE virus attack:

“Multiple copies of itself, hide the hard drive of the victims several files

“Adding new files to the victim’s registry

“It copies itself to replace the various different types of files

“It sends the message through the Internet Relay Chat client

“It is downloaded and executed a file named WIN-BUGSFIX.EXE from the Internet. The main purpose of this document is not to fix the flaw, but a password-stealing application and sends confidential information to the hacker’s e-mail.

 

How to avoid the ILOVEYOU virus infection

“Prevention: You receive a letter titled” ILOVEYOU “e-mail should be deleted immediately. Even the message sent by the people you know, but also do not open the attachment in order to avoid poisoning.

“Automatic Antivirus: Install antivirus, the implementation of automatic virus. Or search ILOVEYOU virus remover, antivirus immediately after installation

“Manual Removal: –

1. Click “Start” – enter “RUN”

2. Enter “regedit”

3。寻找下列路径并删除:KEY_LOCAL_machine\SOFTWARE\Microsoft\windows\currentVersion\Run\MSKernel32″

HKEY_LOCAL_machine\SOFTWARE\Microsoft\windows\currentVersion\RunServices\Win32DLL”

HKEY_LOCAL_machine\SOFTWARE\Microsoft\windows\currentVersion\Run\WIN-BUGSFIX”

4. Delete the following files:

windows\Win32DLL.VBS

\system\MSKernel32.VBS

\system\LOVE-LETTER-FOR-YOU.TXT.VBS

\system\LOVE-LETTER-FOR-YOU.TXT.HTML

Write a comment

Name
Comment