Anti-Virus Emergency Response Team (AVERT), the anti-virus research division of Network Associates, Inc, has assigned a medium on watch risk assessment
to the recently discovered W32/LOVGATE@M, also known as Lovegate, a mailer worm that propagates via e-mail by copying itself over open network shares.
It replies to messages in the user's Outlook or Outlook Express inbox. In addition, this worm has a backdoor Trojan component that could enable the
attacker to gain remote access into infected systems. It was first discovered on February 23, 2003 and has been found worldwide, most notably
in the UK, Germany,
throughout Europe and in Asia Pacific.
Lovegate spreads via open network shares and copies itself to folders and sub-folders using the following filenames:
fun.exe, images.exe, news_doc.exe, s3msong.exe, pics.exe, billgt.exe,
midsong.exe, PsPGame.exe, hamster.exe, setup.exe, tamagotxi.exe, joke.exe,
docs.exe, searchurl.exe, card.exe, pics.exe.
CYBER NEWS SERVICE