VARIANTS SPREADS IN THE WILD
Virus Name : W32.Lovegate.C@mm
Alias : I-Worm/Lovegate, I-Worm.Supnot.a,
Virus type : Internet
level : Low
Lovegate.C is a modified variant of
Lovegate worm, uses e-mail
addresses collected from *.ht* files to send infected
messages. It also copies to shared network drives and drops
backdoor programs in the infected system.
When the infected
attachment is executed, the worm copies itself to
Windows system folder as
creates new keys in the registry Run section to load
automatically. It also modifies the registry to load whenever a
text file is opened.
WinGate initialize=C:\%SYSTEM%\%system%\WinGate.exe -remoteshell
Module Call initialize=C:\%SYSTEM%\RUNDLL32.EXE reg.dll
In case of Win9x systems, it modifies win.ini
file and adds the entry run=rpcsrv.exe.
The worm tries to copy itself to the shared folders connected on the network in any of the following
Lovegate worm uses its own SMTP engine
to send infected messages. The worm spreads via e-mail in two
1. It can send a new infected message with
the subject and message body taken from the worm.
2. It can reply the mails found in the
inbox using MAPI functions with the following text "I'll try to reply as soon as possible.
Take a look to the attachment and send me your opinion!"
Lovegate worm drops backdoor programs in
the infected system. It can be used
by hackers to steal your data. You can use Solo trial version
to remove the worm from your system.
How can I protect my
Solo has incorporated Lovegate worm in its signature file to protect
users from this worm attack. Solo antivirus
registered users are already protected from this
worm. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
to remove this worm?
antivirus can detect and remove Lovegate and its variants safely. Use the following link to Download
30 day trial version of Solo antivirus
remove viruses from your computer.
Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VB, Java scripts,
Trojans, Backdoors, boot sector, partition table
and macro viruses.
purchase Solo antivirus using the link