Quote from Forum Archives on May 5, 2000, 11:46 pm

Posted by: lifeunlimited <lifeunlimited@...>

5 May, 2000

Dear friends:

I don't want to belabor the issue, but here is some additional
information that may help some of you. Glen Stewart, who manages this
mailing list, and Greg Slade of Canada are both highly qualified people
who have valuable insight to share in matters such as virus warnings.

Greg's suggestions below are most helpful to those of us who are such
amateurs in the field. Hope you benefit from his remarks.

There is a second letter I just got moments ago which I am attaching that
gives some specific instructions.

In His Bond,

Bob Tolliver -- (Rom 1:11-12)
Life Unlimited Ministries
E-Mail: [email protected]
Ph: 417-275-4854 Fax: 417-275-4855
Do You Get "Shoulder To Shoulder"?

--------- Forwarded message ----------
From: Greg Slade <[email protected]>
To: "Bob Tolliver" <[email protected]>
Date: Thu, 4 May 00 19:05:38 -0800
Subject: The "V" word
Message-ID: <[email protected]>

> Know anything about this? I'm totally skeptical of
> everything I get like this, as you know. The thing
> that causes me concern as to its possible legitimacy,
> though, is the existence of a website ---- which, of
> course, could be a trick in itself.

Yes, this one is legitimate. (Although I have to admit that warnings in
all capital letters with lots of exclamation points generally tend to be
wrong.) In fact, it got sent to people at work by the dozen. Symantec's
web site was totally overloaded this morning, presumably as people were
rushing to update their virus signatures for Norton Antivirus. (Which, by

the way, is not the best antivirus software.) If you are not using
Windows, you cannot be infected. If you are running Windows, but not
using Outlook, then you can be infected, but you won't inadvertantly
spread the virus. As Glen has already mentioned, Linux (and, I hasten to
add, the Macintosh) are totally immune. In any case, your best defence is

never to open any file attachments people send you by E-mail without
checking with them first to make sure that they *intended* to send you a
file and can explain what it is.

One of the better antivirus programs for WIndows is F-PROT Professional,
from Data Fellows: www.datafellows.com/v-descs/love.htm

I should mention another resource: the place where I just started work
provides free support for computer users. It's called PCSupport.com, and
you can connect to it at www.pcsupport.com. At the moment, there's not
much in the virus information area, but I'm hoping to change that.

God bless,

Greg

Greg Slade | "When the modern world says to us aloud,
[email protected] | 'You may be religious when you are alone',
www.welovegod.org/greg/ | it adds under its breath, 'and I will see to
www.welovegod.org/ots/ | it that you never are alone.'" - C.S. Lewis

Letter 2

Hello every one,

HAPPY BIRTHDAY TO ME!!! What a Birthday present!?

This e-mail is to let all of my friends know about this nasy virus that
is
sweeping the the world as we speak. This virus just about killed my
servers
at GTE. But I was able to stop it in time. It you open the e-mail called
"ILOVEYOU" and click on the attachment your computer will get infected
with
the ILOVEYOU virus. This virus is very ugly. It will send the virus to
everyone in you personal address book and you global address book. It
will
also to the same to everyone that you send it to and so on. Within 15
minutes
My servers were swarmed with e-mails. Now comes the ugly part. It will
also
send your passwords to a ftp site and then edit your registry file to run

this again every time you re-boot. It will also currupt all you .jpg .mp3

.jpeg .bmp and numerous other files.

HOW YOU CLEAN YOU COMPUTER OF THIS NASTY VIRUS!!!!

Search you hard drive for these files and delete them:

mskernel32.vbs
win32dll.vbs
winfat32.exe
win-bugsfix.exe
LOVE-LETTER-FOR-YOU.htm
script.ini ( note do not delete the PSCRIPT.INI file this is for you
printer
)
and all files on all partitions with the extension .vbs

Note all your graphics files with get corrupted and have the extension
.vbs
added on them
(example: sam.jpg will now look like this : sam.jpg.vbs )
This fill is now dead. Even it you reneme it the file is bad.

After you delete all of these files make sure that you empty you trash
can!!!!!

Next you will have to edit your registry. Be very carefull when doing
this.
If you know how to make a backup of you registry please do so.

Run regedit

then delete these entries:

HKEY_LOCAL_MACHINEsoftwareMicrosoftWindowscurrentversionRunMSKernel
32

HKEY_LOCAL_MACHINEsoftwareMicrosoftWindowscurrentversionRunservices
Win32
dll

HKEY_CURRENT_USERsoftwareInternet ExplorerMainstart page delete what

ever is in the key and put you normal home page (like yahoo.com )
or
something like that

HKEY_CURRENT_USERSoftwareMicrosoftCurrentVersionRunWIN-BUGSFIX if
it
exsist.

This is what Norton says to do to clean this virus. Note that this will
just
get rid of infected files. This does not make sure that your installed
programs will still work. All of your .JPG files are gone now. So if you
have
a graphics program that you normally use .jpg files thay will all be gone
now.

Also delete all of the "ILOVEYOU" e-mails that are in you inbox in what
ever
mail program that you use.

If you use Netscape make sure that you remove the home page that is in
your
browser just like we did for internet explorer above.

I hope that this will help you with this virus problem. If you need
further
help with this virus please call me or e-mail be and I will try to assist
you
in removig this Nasty VIRUS.

God Luck,

Sam Moore
[email protected]
813-661-9807 Home Phone