More info on this crazy one!
Be careful!

Peace 
King Solomon


--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

----- Original Message ----- 
From: "Seth Tepfer" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Thursday, May 04, 2000 10:44 AM
Subject: How to know if you have the "I Love You" virus


> The "I Love You" virus is spreading like wildfire. Your computer has
> probably already downloaded the VBScript. But have you gotten the virus
> already? Probably not. Unless you use Outlook, you have to run the VBScript
> to activate the virus.
> 
> But to be certain, you can look for certain files. Per the
> "http://www.datafellows.com/v-descs/love.htm" site:
> 
> ==========================================
> When it is executed, it first copies itself to Windows System directory as:
> 
>   - MSKernel32.vbs
>   - LOVE-LETTER-FOR-YOU.TXT.vbs
> 
> and to Windows directory:
> 
>   - Win32DLL.vbs
> 
> Then it adds itself to registry, so it will be executed when the system is
> restarted. The registry keys that it adds are:
> 
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKernel32
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Win
> 32DLL
> ==========================================
> 
> If you do not have those .vbs scripts in your Windows\System directory, you
> should be fine. Delete the script, go on with your day.
> =========================================================================
> Seth Tepfer: Director of Administrative Computing & Innovative Technology
> Oxford College of Emory University - 770-784-8487 - [log in to unmask]
> http://www.emory.edu/OXFORD/Staff/seth/sethtepfer.html
> ===== Florida Rhapsody:= http://www.FloridaRhapsody.org/ ================
> =========================================================================
> Witty saying of the moment:
> More people would learn from their mistakes if they weren't so busy denying
> they made them.
> 

----------------------------------------------------------------------------

To unsubscribe/subscribe or view archives of postings, go to the Gambia-L
Web interface at: http://maelstrom.stjohns.edu/archives/gambia-l.html

----------------------------------------------------------------------------