MANILA, Philippines (AP) &#151 Two students in a Philippine computer college authored software packages that might have been combined to help make the “ILOVEYOU” virus that disabled e-mail systems worldwide, school officials stated today.

“We aren’t saying those are the culprits,” stated Manuel Abad, executive v . p . in the AMA Computer College in Manila. But Abad characterised the data, that has been distributed to investigators, as “potential leads for more confirmation.”

Investigators haven’t designated either from the students, Onel A. de Guzman and Michael Buen, as suspects. The 2 were people of the subterranean computer group known as GRAMMERSoft, which provided programming to small- and medium-size companies as well as authored and offered thesis projects to computer students, Abad stated.

The location of De Guzman were unknown, but he resided within the same apartment like a bank worker who had been arrested on Monday on suspicion of participation using the virus, then later released due to a insufficient evidence.

Investigators have tracked the “ILOVEYOU” virus to some phone line within the apartment.

Relatives from the bank worker, Reonel Ramones, have stated they think de Guzman is accountable. Justice Secretary Artemio Tuquero acknowledged today that Ramones might have been “a fall guy” but stated it had been too early for officials to obvious him.

Buen graduated Friday &#151 eventually following the virus jolted companies and governments all over the world, creating disruptions that could cost around $10 billion, mostly from lost productivity.

Buen wasn’t at his home whenever a reporter visited today, but his mother, Emma Buen, stated her boy only had a classic computer he did not use for being able to access the web. “I realize that he’s nothing related to it,” she stated.

De Guzman’s computer software could steal passwords and it was written like a thesis proposal at AMA Computer College. However the idea was rejected on February. 24, having a thesis reviewer in the school noting: “This is illegal” and “We don’t produce burglars.”

A duplicate from the thesis proposal was acquired through the Connected Press today.

Within the proposal, de Guzman authored the software “will be useful to numerous people, especially Online users,” who wish to get passwords and take more time on the web without having to pay. He added the program is needed “steal and retrieve Internet accounts from the victim’s computer.”

Onel’s sister, Irene de Guzman, is Ramones’ girlfriend and it is being searched for by investigators for questioning.

Buen’s program, that was recognized as thesis material, could create multiple copies laptop or computer files, Abad stated.

Ramones was launched Tuesday while investigators looked for evidence among 17 computer diskettes grabbed inside a raid of his apartment on Monday.

FBI agents make copies from the diskettes and therefore are studying them individually in Manila, stated Elfren L. Meneses Junior. from the National Bureau of Analysis.

U.S. Embassy officials weren’t immediately readily available for comment.

The romance bug virus spread rapidly through greater than 20 countries a week ago, surging into e-mail addresses kept in the computers of anybody who got an infected e-mail message and opened up an attachment entitled “ILOVEYOU.”

When opened up, herpes can destroy graphics along with other saved files and steal passwords. Several variations have popped up, one coming across an e-mail joke and the other purporting to become a receipt for any A Birthday gift.

Cracking the “Love Bug” situation is a daunting job for the Philippine police, who lack high-tech equipment in addition to cyber-savvy investigators. They also have been hindered by lack of local laws and regulations that may be put on computer crimes.

Philippine investigators are attempting to identify an individual or individuals who used 10 computer pseudonyms culled from the web. Meneses, who heads the NBI’s Anti-Fraud and Computer Crimes Division, was not able to report any progress today.

The division seems not high-tech. An indication outdoors work is hand crafted and connected to the window with tape, while a duplicate machine sitting atop a classic eco-friendly filing cabinet inside displays an “out of order” sign.

Details Concerning the Computer Love Bug

By ANICK JESDANUN
AP Internet Author
MAY 04, 22:22 EDT

A trojan disguised being an electronic love note welcomed Online users all over the world Thursday.

Here are a few details:

Q. What’s herpes about?

A. Herpes, technically referred to as a earthworm, is software written to spread itself instantly through e-mail or forums. It started distributing through Asia and Europe while Americans remained as sleeping. Circulation within the U . s . States skyrocketed once the workday started.

Q. Exactly what does it seem like?

A. Herpes usually may come as e-mail from the friend or any other familiar address. “ILOVEYOU” seems within the subject line. The note asks the recipient to “kindly look into the attached LOVELETTER originating from me.” Hitting the attachment, “LOVE-LETTER-FOR-YOU.TXT.vbs,” activates herpes.

Q. Exactly what does herpes do?

A. It may destroy or hide certain graphics, music along with other files. This may also steal certain passwords and send these to an e-mail account believed located in the Philippines. Because the virus replicates, it may also clog computer systems, causing delays and shutdowns.

Q. So how exactly does herpes spread?

A. If Microsoft Outlook e-mail program can be used, the activated virus will instantly send copies to everybody indexed by the program’s address book. Users of other e-mail programs and non-Home windows computers may also unintentionally spread herpes by forwarding the romance note to some friend. Herpes may also spread using through some chat room programs.

Q. Is that this just like last year’s Melissa virus?

A. No, even though it spreads in exactly the same that Melissa spread. While Melissa limited copies to 50 individuals the address book, the romance virus can spread itself to hundreds, even a large number of other addresses. Plus, Melissa didn’t spread through forums.

Q. So how exactly does herpes match up against other infections?

A. From the thousands of known trojan, security experts say this is actually the fastest to spread, partially because it doesn’t limit its targets as Melissa did. Plus, Melissa first struck on the weekend, giving computer managers time for you to cleanse their systems before workers came back. David Perry at Trend Micro Coupon Corporation. an anti-virus software maker, also notes “brilliant social engineering” for herpes author. “Who does not wish to open an e-mail that states they adore you?” he stated. “My wife transmits me e-mail with `I love you’ on the top. I’d have visited it.”

Q. What should people who use computers do?

A. Install anti-virus software and obtain the most recent update in the manufacturer’s Site. Don’t open the attachment, “LOVE-LETTER-FOR-YOU.TXT.vbs.” Select greatest security choices for browser, e-mail and chat room programs. Network managers also needs to screen incoming mail to get rid of messages using the virus.

Last updated 2000/05/10
Archived in the Department of Information Technology site using the kind permission of:

for higher education.