Basic introduction and characteristics of computer virus love bug

Next, I will bring you the third largest computer virus in the world-love bug virus, which constantly invades our computers under extremely harmful circumstances. The following is the basic introduction and characteristics of computer virus, hoping to give you a preliminary understanding, thank you!

Basic introduction and characteristics of insect-addicted computer virus;

On May 4th, 2000, a name was changed? I love you? Computer viruses began to spread rapidly all over the world. This virus spreads through the MicrosoftOutlook e-mail system. What is the subject of the message? I love you? , and contains an attachment. Once you open this email in MicrosoftOutlook, the system will automatically copy this virus and send it to all email addresses in the address book. ? I love you? Viruses, also known as? Love bugs? Virus, a worm virus, is very similar to Melissa virus in 1999. It is said that this virus can overwrite some files on local and network hard disks. After the user's machine is infected, the mail system will slow down and may lead to the collapse of the whole network system.

Chinese name love bug virus

Name? I love you?

Time: May 4, 2000

Square Microsoft Outlook communication

Data editing

Because it is spread through the email system, I love you? The virus attacked countless computers around the world in a short period of time. From the infected computer system, do you love bugs? The target of the virus is not ordinary computer users, but those computer systems with high-value IT resources: the e-mail systems of several security departments of government agencies such as the US Department of Defense, the Central Intelligence Agency and the British Parliament have been attacked.

Allegedly:? Love bugs? Virus is the fastest and most widespread computer virus discovered so far, which has had a negative impact on many institutions around the world, including stock brokers, food, media, automobile and technology companies, universities and even hospitals. At present,? Love bugs? It is still spreading rapidly, and its harm will continue to expand.

2 variant editing

Are you crazy? Love bugs? Shortly after this virus was discovered, Guanqun Gina's global virus monitoring network found that in order to entice more network users to fall for it, another variant virus was now produced. The subject words of emails with this virus often include? Jokes? This word lures users to open emails. It is expected that in the next few days. I love you? Viruses will also produce more kinds of mutated viruses.

This new variant discovered by Guanqun Gina Company this time is not only written in the subject of the email? Jokes? In addition to this word, there is another name called? Very funny? The folder of. To this end, Guan Qun Jin Chente reminded the vast number of network users not to open any email with the above logo, and should delete it immediately. At the same time, Guan Qun Jin Chen reminded computer users to upgrade anti-virus software in time, because the latest version of the anti-virus database can kill viruses.

VBS/ lovelet. A bug.

Characteristics of VBS/ love letters. A worm (see photo)

VBS/ lovelet. A is a VBS(Visual Basic Script) worm based on email. It arrives in your mailbox as an email attachment (see figure), and the subject of the email is ILOVEYOU (all capitals, no spaces).

Email text:

Please check the love letter attached to my email as soon as possible.

E-mail has an attachment named love-letter-for-you.txt.vbs. The display of VBS extension depends on the system settings.

If you receive an email that matches the above content, you should not open the attachment of the email and delete the email immediately.

The LoveLetter worm spreads by generating the above e-mail, and the worm itself is sent to all recipients in the Outlook address book as an attachment to the e-mail. In a large organization, a large number of e-mails may overload the e-mail server and paralyze it.

The spread target of the LoveLetter worm is Windows 98, Windows 2000 and Windows NT 4.0 installed by default, and Windows 95 system with Windows Scripting Host(WSH) engine installed. Worms use different names to copy themselves into multiple subdirectories:

The file name in the Windows directory is Win32DLL.vbs, and the file names in the \Windows\system directory are MSKernel32.vbs and Love-Letter-for-you.txt.vbs.. ..

The LoveLetter worm modifies the registry information to run at the next startup:

HKElkjhflkafkljhsajdkhfkajshfklafhlkajfhs

c:\ WINDOWS \ SYSTEM \ mskernel 32 . VBS

HKEY _ LOCAL _ MACHINE \ Software \ Microsoft \ Windows \ current version \ run services \ Win

32DLL=C:\WINDOWS\Win32DLL.vbs

The worm also sets the default IE(Internet Explorer) homepage and downloads a copy of the WIN_BUGFIX.exe file, which looks like a? Backdoor server? (Backdoor server). The real location of the file on the Web is currently closed. HKEY _ LOCAL _ MACHINE \ Software \ Microsoft \ Windows \ current version \ Run \ winfat 32 = C:\ Windows \ SYSTEM \ winfat 32

The LoveLetter worm searches all subdirectories, overwrites all files with extensions such as JPG, VBS, JSE, CSS, WSH, SCT, HTA, MP3 and MP2 with its own copy, and adds VBS extension to file names without VBS (non-VBS) suffix. For example, a file named will become. The worm will start to spread the next time you click or activate the infected file.