Re: Anyone hve any info on this one?

[Doug Winter <dwinter () BUSINESSEUROPE COM>]

I reckon it was probably VBS.Plan

http://www.symantec.com/avcenter/venc/data/vbs.plan.a.html

<quote>
Subject of e-mail: US PRESIDENT AND FBI SECRETS =PLEASE VISIT =>
(HTTP://WWW.2600.COM)<= or a randomly generated 6 letter word displayed in
all capital letters, or it might be blank.
</quote>

randomly generated 6 letter word?

d.

> -----Original Message-----
> From: Steve [mailto:steve () SECURESOLUTIONS ORG]
> Sent: 17 October 2000 01:42
> To: INCIDENTS () SECURITYFOCUS COM
> Subject: Re: Anyone hve any info on this one?
>
>
> Yup.
>
> Last week I had about fifteen or so messages with this virus
> attached to it.
> Luckily NAV for Exchange picked em up at the mail gateway.  I
> also saw it on
> a couple other email systems that I have addresses on.  Don't
> know how bad
> it actually was though.
>
> --------------------------------------------------------------
> ----------
>
> Steve Manzuik                                 Calgary, Alberta, Canada
> Moderator - Win2K Security Advice             (403)660-2997
>
> Security Analyst - Bindview RAZOR Team
> smanzuik () razor bindview com
> http://razor.bindview.com
>
> * - The opinions expressed in this email are mine, and mine
> alone.  They - *
> * - do not reflect those of my employer or anyone else for
> that matter.  - *
>
> --------------------------------------------------------------
> ----------
>
> > -----Original Message-----
> > From: Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]On
> > Behalf Of Rob Blain
> > Sent: Monday, October 16, 2000 12:30 PM
> > To: INCIDENTS () SECURITYFOCUS COM
> > Subject: Anyone hve any info on this one?
> >
> >
> > Anyone hear of this virus yet?
> >
> > > XXXXXXXX  computer systems were hit by a virus yesterday.
> They had to
> > > shut down most of their network for the day and seriously
> disrupted
> > > courses and programs.
> > >
> > > The culprit was a variation of the 'I Love you' virus and
> showed up as
> > > BUUEBE in the subject line. This variant creates a random subject
> > heading.
> > > If you receive any email with a suspicious subject and an
> attachment,
> > > delete it immediately and then empty your deleted mail folder.
> > >
> > > Thanks for your co-operation
> >
> >
> > Thanks,
> >
> > Rob
> > --
> > =============================
> > Rob Blain (RB2103)
> > Systems Support Analyst
> > College of New Caledonia
> >
> > E-mail:   blain () cnc bc ca
> > Phone:  (250) 561-5848 ext. 351
> > Fax:    (250) 561-5832
> > =============================