|
Sunday, 25 September 2005 |
Description:
This memory-resident worm drops a copy of itself as LOVELETTER.DOC.EXE in the Windows folder. It then drops copies of itself into the Windows system folder and the root folder (usually C:). It also drops a copy of itself in drive A: as the file PROJECT1.DOC.EXE.
This worm propagates by sending a copy of itself as an attachment to email messages, which it sends to target addresses, using its own Simple Mail Transfer Protocol (SMTP) engine.
The email message it sends out has the following details:
Subject:
Love for forgiveness:->
Message Body:
I love you, please forgive me.
Attachment:
Loveletter.doc.exe
It gathers target email addresses from the folder C:Program FilesYahoo!MessengerProfiles, which contains information of previously logged users in the system.
|
