Love is still in the air - Computer Associates advises of destructive "ILoveYou.BD" worm

Computer Associates International, Inc. (CA) has advised computer users of the destructive "ILoveYou.BD" worm (also known as VBS.ILoveYou.BD, LoveLetter.BD, VBS/LoveLetter.BD and Hooker 2.4.Trojan). ILoveYou.BD is a new variant of the devastating "ILOVEYOU" worm and has been reported " in the wild." CA`s clients using eTrust InoculateIT, eTrust Content Inspection PE and eTrust Mail Watcher solutions are already proactively protected from this latest attack.

The worm is received as an attachment to an email with the subject: "Resume." There will not be any text in the body of the message, but the email will contain an attachment called "resume.txt.vbs"

If "resume.txt.vbs" is executed, the worm creates a text file containing a job offer written in the German language. The position title is "Knowledge Engineer, Z"urich" and the "successful applicant" would be required to develop a knowledge base for a Swiss eCommerce company. Once the file is created, the worm launches Notepad to display the contents of this file.

The recent enhancements to InoculateIT protect computer users from malicious viruses and worms by offering the flexibility to block the execution of specific file types. eTrust Content Inspection PE protects PC users from worms by blocking file types commonly used by virus writers from infecting home user`s machines. Mail Watcher monitors a user ` s email application, alerting when suspicious activity is detected. Mail Watcher stops the spreading viruses through email by blocking automatic generation of new emails.

Complete, proactive protection from the latest viruses and worms can be downloaded free from CA at http://www.ca.com/proactivesecurity. For the latest information about the latest threats http://www.ca.com/virusinfo