UCit Response Prevents Bigger "Byte" From Love Bug Virus Date: May 12, 2000 By: Chris Curran Phone: (513) 556-1806 Archive: Campus News Thousands of e-mail messages bearing the love-letter computer virus hit UC accounts last week, but relatively few users were affected. UCit technicians quickly spread the word and shut down the Exchange e-mail server temporarily to help contain the virus's spread. The attack began Thursday morning with messages bearing the subject line "I LOVE YOU," and asking recipients to open the attached "love-letter- for-you" attachment. Those who followed the instructions launched what is now being called one of the most damaging computer viruses in history. The virus was programmed to send copies to the first 400 names in the user's address book, but it also struck hard at the user's hard drive -- erasing and replacing numerous types of files. It also had the ability to damage files on networked servers, searching folders and sub- folders for targets to infect. By Friday, the virus had "mutated" into multiple forms with nicknames such as "love bug" and masquerading as jokes or Mother's Day gift receipts. The electronic alerts and updates issued by UCit restricted the virus's spread in time for most users to download updated virus protection software and data files. Incoming e-mail was also "quarantined," so many people never even saw the infected messages. Pete Pfefferkorn, UCit senior systems analyst and mail administrator, reported that more than 7,800 viruses were caught on the Exchange e-mail server. Amazingly, only 18 Exchange users actually launched the virus. "Pete did an heroic job of monitoring, scanning, and getting on top of the problem," remarked Fred Siff, vice president for information technology at UC, who added that a new UCit network security team will play "an increasingly critical role in safeguarding the campus community." Still, the episode served as a warning of how easily damaging viruses can spread. "Anyone who opens an attachment from someone they don't know is tempting fate," emphasized Siff. Pfefferkorn added that both "love bug" and its predecessor the "Melissa" virus are dangerous because they make it appear that the e-mail message is coming from someone you know. "Users can no longer make the assumption that if a message originaates from a user you know that the message is safe," said Pfferkorn. It's also important to have updated virus protection software on your computer to keep the software's data files updated. More information can be found at the UCit anti-virus software web site.