Aliases: Bloodhound.W32.VBWORM
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: dormant
Spreading: slow
Geographical info: Europe, North and South America, and some parts of Asia and Australia
Removal: Easy
Platform: W32
Discovered: 15 Aug 2003
Damage: Low

Characteristics: The W32.Bugsoft program is also called the “I Love you” virus. It typically affects all Windows Operating Systems, namely Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT and Windows XP.

More details about W32.Bugsoft

This worm displays the message box in big bold red background box saying: “Hahahahaha! Shortcut Killer Virus In You System! I LOVE YOU!” It also has a letter saying "Helow my dear friend, I am sorry to say that your system got effected by shortcut killer virus by me. I am a student of bsc.computer science. And I got many cheating from my devil friends. So I want to spread this mrssage overall world that don’t cheat friends.” It will also have another message box embedded to the previous box saying: “format Disk, Virus!” You need to press the “ok” button to remove the message boxes. After displaying the box, it will create two scripts in your Windows folder named as “C:\windows\jk.bat” and “C:\windows\mail.vbs.” This will be automatically opened and when it is, it will create and save the love.exe program to various folders including c:\windows\startm~1\programs\startup, so that w32.bugsoft runs when you start windows. It also tries to mail using the vb script, mail. But chances for this to happen will be unsuccessful and/or are slim.

Effects of this program the computer include the creation of a drain in the system, which results to an overall cutback in the computer’s performance; excessive usage of free space and memory; slower Internet connection; opening of illicit network connections; modification of system files; and hanging or freezing of running applications.