Vulnerability Development mailing list archives
I Love You.. Repair Program
From: james () TRAFFIC CO UK (James Wilkins)
Date: Thu, 4 May 2000 17:03:15 +0100
Hi Guys, Please find enclosed a program that reverses all the effects of that nasty 'I LOVE YOU' Virus It, Kills the Windows Scripting Engine that is running Removes the Registry entries it places in the CURRENTVERSION\RUN* Keys Removes all *.vbs files that are copys of the script (checks the first few lines to ensure they match) Hope this helps some of you out there, who like us have a 100+ user base that all decided they would open the email. Regards James -- Mr James Wilkins | Systems Administrator | Traffic Interactive Limited 020 7616 9041 | james () traffic co uk | http://www.traffic.co.uk ---------------------------------------------------------------------------- ------------------------- "Never argue with an idiot. He will take you down to his level, and beat you with experience."
Current thread:
- Re: firewall audit, (continued)
- Re: firewall audit Bennett Todd (May 04)
- Re: firewall audit Ron DuFresne (May 04)
- ethernet cards & promisc mode Security Team (May 03)
- Re: ethernet cards & promisc mode R (May 04)
- Info on the VBS/LoveLetter virus Roelof Temmingh (May 04)
- Re: ethernet cards & promisc mode Todd Garrison (May 04)
- Re: ethernet cards & promisc mode RioTek (May 04)
- ILOVEYOU worm Elias Levy (May 04)
- don't open email w/ subject line "I love you." (Was: Re: I love you.) Ken Williams (May 04)
- Re: IL0VEY0U worm Elias Levy (May 04)
- I Love You.. Repair Program James Wilkins (May 04)
- Re: IL0VEY0U worm Elias Levy (May 04)
- Re: IL0VEY0U worm Elias Levy (May 04)
- Re: IL0VEY0U worm Elias Levy (May 05)
- New worm? Blue Boar (May 04)
- Re: New worm? Andri Saar (May 04)
- Re: New worm? A.T.Z. (May 04)
- Re: New worm? Sander Smeenk (CistroN Medewerker) (May 04)
- Re: New worm? M J (May 04)
- Re: New worm? Erik Kooijman (May 04)
- email worm, NOT iloveyou Hinken, Brian (May 04)