Subject: Love Letter Virus:  Safe Computing

WINDOWS USERS:

Norton has now identified 29 variations of this virus that attacked last
week.

Here are 10 steps you can do to test if you are infected, and to protect yourself in
the future.

1.  DO NO OPEN any attachment with a *.vbs extension.

2.  Likewise DO NOT OPEN any file with a *.vbs extension, even if the file has a name like
photo.jpg.vbs.  See also step 9.

3.  Download a love-letter repair file directly from Norton.  Save it to your hard drive
and double click to run.  It will repair some aspects of infection.

 fixlove.exe

4.  Download the newest anti-virus signature.

This will help tell if you are infected, and how many/which files, and protect you in the future.

5.  Now that you have updated your anti-virus signature, run the program.  Select ALL
files and ALL drives and ALL partitions  on your local hard drive.  If virus infections
are found, print a list which will be used during the restore process.
Run the program again, and delete all infected files. All infected files MUST
be deleted, otherwise you risk re-infection

6.  Configure your anti-virus to actively monitor file activity, and to check ALL files
and not just the default setting of  'program files'.

7.  Restore the deleted files.  Use the list from step 5 or restore all files.
Use original software CD if necessary.  This will restore your original functionality,
prior to infection.

8.  Install a patch to your Outlook 97/98/2000 which forces you to save an attachment to
disk first before opening, so that as you open the file, your anti-virus software will check
it for viruses.  Install one of these ( you can highlight, copy and paste to your
browser, or, if you e-mail converts these to hotlinks, just click the proper one):

 Office 97 Patch
 Office 98 Patch
 Office 2000 Patch

Follow the on-screen instructions.

9.  Configure your Explorer to display extensions, so that you can more clearly see what
you are opening.  For those who can, from the Desktop, double click on My Computer.
Select View - Folder Options - View.  Find the line that says "hide file extensions for
known file types" and uncheck the check-mark.  Close any open windows.

10.  Call the IT Help Desk at x43330 for additional assistance or questions, or your IT
Professional.

Back to Security Central