Variations of the newly discovered Love Letter virus, a Visual Basic (VB)-based script that arrives with a message subject of "ILOVEYOU," are already spreading. These variations might have a subject line of "FW: Joke," "Joke," or something similar, where the email contains a copy of the virus in a file attachment named "veryfunny.vbs."
Be sure to visit Kurt's advice at thepope.org where he offers details on how to manually remove the virus. In addition, Kurt offers information on ways to correct any damage done, such as recovering MP3 and MP2 files, recovering any missing stylesheets for "My Computer" displays, and more.
CERT posted a detailed advisory and has asked that anyone infected by the virus please email them at cert@cert.org with a subject of "CERT#35849" so that they can better track the scope of the infection. In addition, Sendmail has published a rule definition that can help filter the virus at the mail server, so it doesn't reach end users.
Is there an application that functions very much like a virus scanning application for MS Exchange, in that it will scan all inbound and outbound email based on a specified criteria. An example would be, I want to intercept all outbound and inbound email that specifically has "fw: ILOVEYOU" in the subject line and dump it to a maintenance mailbox that acts as a quarantine location. Additionally, I would like to scan all existing email in mailboxes for the same search criteria. Do you know of a product that does such a thing?
This is very helpful stuff, particularly the attempts to automate the fixes. I would also like to see some detailed analysis on the vulnerabilities of Outlook and its scripting and what we Outlook users might give up to gain security. Thanks