LovGate rears its head again

By Steve Malone

Posted on 24 Mar 2003 at 14:51

A new variant of the LovGate virus has reared its ugly head according to virus detection company MessageLabs. The new version W32/LovGate.F-m is a mass-mailing virus that incorporates an SMTP engine, and may be able to spread via network shares as well as email.

The company says that once activated, the virus appears to reply to any emails it finds in the recipient's in-box, attaching itself to the reply. Subject names appear to be based on existing emails that are in reply, and therefore random.

The file attachment is written in Microsoft Visual C/C++ and is compressed using ASPack and is 107,008 bytes in size.

For more details go to the MessageLabs Web site.

At this time, infections are confined to South Korea and Germany.

Byline
Steve Malone</p> </div> <!--start email a friend--> <div class="emailAFriend maxMarginBottom floatRight"> <ul> <li><a href="/news/40229/lovgate-rears-its-head-again/email" rel="nofollow">Email to a friend</a></li> <li><a href="/news/40229/lovgate-rears-its-head-again/print" onclick="newWin('/news/40229/lovgate-rears-its-head-again/print', 1024,768); return false;" title="Print the article - LovGate rears its head again" rel="nofollow">Print this article</a></li> </ul> </div> <!--end email a friend--> <!---start social bookmarks--> <div class="boxInner"> <div id="socialBookmarks"> <div class="boxPad"> <a href="http://subscribe.pcpro.co.uk/3-issues-for-£1-offer/?utm_source=PCP&utm_medium=ILC&utm_content=sec&utm_campaign=1447_end+of+article+link+v2" target="_blank">Subscribe to PC Pro magazine</a>. We'll give you 3 issues for £1 plus a free gift - <a href="http://subscribe.pcpro.co.uk?utm_source=PCP&utm_medium=ILC&utm_content=sec&utm_campaign=1423_end+of+article+link" target="_blank"><b>click here</b></a> </div> </div> </div> <!--end social bookmarks--> </div> <div class="MainboxTitle news"> <h2>From around the web</h2> </div> <div class="OUTBRAIN" data-src="http://www.pcpro.co.uk/news/40229/lovgate-rears-its-head-again" data-widget-id="AR_2" data-ob-template="pcpro" ></div> <script type="text/javascript" src="http://widgets.outbrain.com/outbrain.js"></script> <div class="clearFix"></div> <!---start user comments--> <div id="userComments"> <a name="commentPost" id="commentPost"></a> <div class="h3Title maxMarginTop"><strong>Be the first to comment this article</strong></div> <div class="leaveboxArrow"> <p class="minMarginBottom">You need to <a href="/reg/login" title="Start your session" rel="nofollow">Login</a> or <a href="/reg/register" title="Create an account" rel="nofollow">Register</a> to comment.</p> <form action="/news/40229/lovgate-rears-its-head-again#lastComment" method="post" id="comment" name="comment"> <p class="minMarginBottom"> <label for="commenttitle">Title:</label> <input type="text" id="commenttitle" name="comment[title]" class="inputBox" value="" disabled="disabled" /> (optional) </p> <p class="minMarginBottom"> <label for="commentbody">Comment:</label> <textarea rows="3" cols="20" id="commentbody" name="comment[body]" class="inputBox" disabled="disabled">