VBS/NEWLOVE WITH DEADLY PAYLOAD

Virus Name  : VBS/NewLove

Alias             : I-Worm/NewLove

Virus type    : VB Script worm

Threat level : Low

Virus details :

                     VBS/NewLove is a modified variant of VBS/Love Letter worm uses Microsoft outlook to spread. It contains a very dangerous payload and it will overwrite all files (including windows system files) with virus code in a fly. The damaged files cannot be recovered.

                     The email message subject will be Fw:< File Name.EXT> ( Example: Abc.TXT ) and the attachment will be < File Name.EXT.VBS > ( Example: Abc.TXT.VBS ). The VBS extension will not appear if Windows Scripting Host is installed. When opening the e-mail attachment, the worm opens Microsoft Outlook Address book and sends email to all the email ids stored. The attached file name is taken from the recently opened list.

                     Then the worm searches for all local, remote drives and overwrites all files with the script and adds the extension .VBS. For example "notepad.exe" will be overwritten as "notepad.exe.vbs". The worm also adds comments in virus code to defy anti-virus scanners. The noticeable property of the worm is that the attachment name and size will vary from machine to machine.

How can I protect my system?

                   Solo has incorporated VBS/NewLove worm and its variants in its signature file to protect users from this worm attack. Solo antivirus registered users are already protected from this worm. Make sure that you have installed registered version of Solo Antivirus to protect your system from all virus threats.

                     To protect your system against infection, disable Windows Scripting Host by following these steps: Click the Start button, Settings, Control Panel, then select Add/Remove Programs, then select the Windows Setup tab, then double-click Accessories, scroll down to Windows Scripting Host, and uncheck the box. Save changes and close the window.

How to remove this worm?

                   If you are already infected with this worm, you can remove it from your computer using Solo Antivirus software. Solo antivirus can detect and remove VBS/NewLove worm safely. Use the following link to Download 30 day trial version of Solo antivirus [1670 KB] to remove viruses from your computer.

                   Solo anti-virus not only scans for all viruses, it contains a unique System Integrity Checker to protect you from New Internet Worms, Backdoors and malicious VB, Java Scripts. It also effectively removes all existing Internet Worms, File viruses, malicious VBS, Java scripts, Trojans, Backdoors, boot sector, partition table and macro viruses.

You can purchase Solo antivirus using the link