Re: Opportunist?

[des () FLOOD PING UIO NO (Dag-Erling Smorgrav)]

Andreas Ferber <aferber () TECHFAK UNI-BIELEFELD DE> writes:
> I stumbled a little bit on the "sub clean_mail", which is called as
> the last cleanup.  At first it looks as if it (like the Virus) does
> something with the whole OE address book.  But if you look closer, you
> see, that it was first intended as to delete the addressbook, but in
> the distributed version, the line, which actually deletes the registry
> entries, is commented out.

Nope. clean_mail isn't supposed to delete the address book, it's
supposed to delete registry entries created by LOVELETTER to keep
track of who it's mailed and who it hasn't. *Not* removing these
entries means that even if you are reinfected, you won't keep
spreading the worm (except to people you've added to your address book
after you ran divorce.vbs)

DES

--
Dag-Erling Smorgrav - des () flood ping uio no