PDA

View Full Version : VBS Script help


p rucker
December 5th 03, 01:32 AM
need help to reverse VBS extension added to jpg pictures that we can't open
now.

Thanks!

Will Denny
December 5th 03, 01:32 AM
Hi

A double-barrelled extension may suggest an infection by the LoveLetter =
Worm:

http://securityresponse.symantec.com/avcenter/venc/data/vbs.loveletter.bj=
..html

Will

"p rucker" > wrote in message =
news:2r_Ja.7380$R73.2238@sccrnsc04...
> need help to reverse VBS extension added to jpg pictures that we can't =
open
> now.
>=20
> Thanks!
>=20
>=20


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.491 / Virus Database: 290 - Release Date: 18/06/2003

Bruce Chambers
December 5th 03, 01:32 AM
Greetings --

You've contracted a variant of the rather old, but world-renowned,
Love Letter worm.

It's *prevented* by installing a good antivirus application and
keeping its virus definition files up-to-date. (And by exercising a
little common sense in the acceptance of email attachments and
avoiding peer-to-peer file sharing applications such as KaZaA and
Morpheus.)

There is, to the best of my knowledge, no way to recover the
infected photos (*.jpg files), as they've all be overwritten with
copies of the worm. I hope you had them backed up to tape or CD. Any
*.mp3's may be recoverable, as they get copied to hidden files.

VBS.LoveLetter and Variants
http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html

VBS.LoveLetter Fix
http://www.symantec.com/avcenter/venc/data/fix.vbs.loveletter.html


Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
----
You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"p rucker" > wrote in message
news:2r_Ja.7380$R73.2238@sccrnsc04...
> need help to reverse VBS extension added to jpg pictures that we
can't open
> now.
>
> Thanks!
>
>

Google