✔ 最佳答案
網路出現 ILOVEYOU 的e-Mail病毒
破壞MP3/JPG/VBS等十多種檔案格式
金帥【空中預警機】免費為您掃解毒
圖片參考:
http://www.ggreat.com.tw/gif10/love.gif
經由Internt傳入國內的主旨為 ILOVEYOU 的e-Mail病毒,會自動發信給信箱中全部的人,由於ILOVEYOU 的e-Mail病毒感染的速度相當的快,迅速造成國內的Internet陸續傳出中毒的求救信。
金帥資訊建議若是收到e-Mail 主旨為ILOVEYOU的信,就立即刪除,並且千萬不要執行其名為【LOVE-LETTER-FOR-YOU.TXT.vbs】的附帶檔。
ILOVEYOU病毒會常駐,並且尋找硬碟中所有的MP3、JPG、MP2、JPEG、VBE、VBS、JS、JSE、CSS、WSH、SCT、HTA等十多種格式的檔案,將檔案變成病毒本身,被破壞後的檔案將失去原有功能。
根據病毒內部署名為來自菲律賓馬尼拉的spyder,其備註還寫著<i hate go to school>。
信件主旨:ILOVEYOU
信件內容:kindly check the attached LOVELETTER coming from me.
附帶檔案:LOVE-LETTER-FOR-YOU.TXT.vbs
至於會使用VBS語言的應用軟體(例如:WORD、EXCEL等Office工具),在電腦未完全清除這個病毒的情況下,將可能會讓病毒再復發。
由於ILOVEYOU病毒清除不易,若不能一次完整的清除乾淨,非常容易再度復發。
金帥的空中預警機緊急提供掃/解/防毒方案,免費為中毒的網友解毒,空中預警機可在中毒環境下掃/解/防毒,並支援Windows下解毒,為國內最早提供完整防毒方案的公司。
======================================================================
另一方法
VBS:LoveLetter searches for the certain files on all local and remote drives. If it finds the file with extension jpg and jpeg, they are overwritten and renamed to *.jpg.vbs, while mp3 and mp2 files are copied to *.mp?.vbs , this copy is overwritten by worm and the attribute of original file is changed to hidden.
Get the fix here:
http://www.sarc.com/ avcenter/venc/data/f ix.vbs.loveletter.ht ml
The VBS.LoveLetter Fix tool removes the changes that were made to a computer by all known versions of the VBS.LoveLetter worm except VBS.LoveLetter.CA, VBS.LoveLetter.BJ, VBS.LoveLetter.BM and VBS.LoveLetter.AS.
CAUTION: Before you run the tool, you must update to the most recent virus definitions and run a full system scan, making sure that Norton AntiVirus (NAV) is set to scan all files. If you run the tool before scanning your system, you may see warnings that indicate that files have been infected with LoveLetter. If you see any such warning, choose to delete the files.
NOTES:
This tool will have limited effectiveness if you have been infected with VBS.NewLove.A. This variant of LoveLetter destroys all files on the system that are not in use. Therefore an infected system will most likely be unstable. If you are running this tool on Windows NT or Windows 2000, you must have Administrator-level privileges. When the tool has finished running, you will see a message indicating whether or not the computer was infected by VBS.LoveLetter. If you are an administrator, and you want to run the tool without displaying the information dialog box, run the tool with the /auto command line switch; for example, C:\Windows\Desktop\fixlove.exe /auto
To obtain and run the tool: Go to
http://www.symantec. com/avcenter/fixlove .exe. Download the file to your Windows Desktop. Double-click the Fixlove.exe file to start the repair tool. Click Remove! to begin the process, and allow the tool to run.