Information About the Lovgate Virus 22 Oct 2004

There is a new and fast spreading virus that you may have heard about in the media called Lovgate.

It is a mass mailing worm that can spread through shared files and across networks. It can steal users passwords and allow the attacker to perform actions on the infected machine.

If it gains access, the virus will copy itself to a file named "stg.exe" in the "System32" Windows folder and attempt to run it. If successful the worm will execute each time the user double clicks on a text file.

The worm sends e-mail replies to messages found in the inbox and is likely to have the following body:
Ill try to reply as soon as possible.
Take a look to the attachment and send me your opinion!

Possible alternate body text may be:
  • Send me your comments...
  • Test this ROM! IT ROCKS!.
  • Adult content!!! Use with parental advisory.
  • Test it 30 days for free.
  • Im going crazy... please try to find the bug!.
  • Send reply if you want to be official beta tester.
  • This is the pack ;)
  • This is the last cumulative update.
  • I think all will work fine.
  • Check our list and mail your requests!

    Possible filenames of the email attachment are:
  • Docs.exe
  • Roms.exe
  • Sex.exe
  • Setup.exe
  • Source.exe
  • _SetupB.exe
  • Pack.exe
  • LUPdate.exe
  • Patch.exe
  • CrkList.exe

    Possible subjects of an infected email are:
  • Documents
  • Roms
  • Pr0n!
  • Evaluation copy
  • Help
  • Beta
  • Do not release
  • Last Update
  • The patch
  • Cracks!

    As always, the standard advice for avoiding a virus infection is:

    1. Always protect your computer with a virus protection program and run it regularly.

    2. Make sure you check regularly for updates to your virus protection program – new viruses appear every day

    3. If you use Microsoft products, make sure you have installed the latest updates CLICK HERE TO GO TO THE MICROSOFT UPDATE SITE

    4. Be extremely cautious about opening any attachments, even when they appear to be coming from someone you know.

    CLICK THIS LINK FOR FURTHER INFORMATION (external site)

    		•

    Adam News Archive