Description:
VBS_LOVELETTER has several variants, which use different email subject, message body and attachments than the original virus. All variants are detected by Trend's latest pattern file.
This VBScript virus, like Melissa, uses Microsoft Outlook to send email with an attachment file "LOVE-LETTER-FOR-YOU.TXT.vbs" to all email addresses listed in the address list. This email has the subject: "ILOVEYOU", body: "kindly check the attached LOVELETTER coming from me." And a file attachment with the virus. LOVELETTER also propagates using mIRC. Using mIRC, the virus sends a copy of itself ;LOVE-LETTER-FOR-YOU.HTM; to users in the same channel as the infected user.
This virus has a destructive payload, it overwrites files with specific extensions with its codes. This eliminates the host file and the file now contains the virus source code.