What do you mean it has no attachments? The thing is the there IS an
attachment, the script called LOVE_LETTER.TXT.VBS. Or we are talking about
different things?
Are you using AltaVista Firewall 98?
> Sincerely yours,
> Anastasia Soudbinina
>
> ----------
> From: Emil Tchomonev[SMTP:[EMAIL PROTECTED]]
> Sent: 04 May 2000 20:24
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: Re: !!! ALERT !!!
>
> It is VB Script and can be safely viewed with any text editor. The bad
> thing
> is that this message has no attachments, so it passes trough my AV
> software
> which unfortunately checks every incoming E-mail message, but only if it
> has
> attachments. Now I am actively looking for AV package which is parsing the
> text in messages as well.
>
> Any help or information will be greatly appreciated.
>
> Best regards.
>
>
> Emil Tchomonev
> Senior IT manager
> Alexandra Group
> 1000 Sofia, Bulgaria
> ----- Original Message -----
> From: Daniel Crichton <[EMAIL PROTECTED]>
> To: Emil Tchomonev <[EMAIL PROTECTED]>
> Sent: Thursday, May 04, 2000 3:29 PM
> Subject: Re: !!! ALERT !!!
>
>
> > On 4 May 2000, at 16:01, Emil Tchomonev wrote:
> >
> > > I didn't suppose a message sent by mistake will make a start to so
> long
> thread.
> > > So after digging a bit, I've found this link about the " I LOVE YOU"
> worm.
> > >
> > > http://www.datafellows.com/v-descs/love.htm
> >
> > Better description than Symantec have yet, but still not complete. I've
> ripped
> > this virus to bits this morning to let our techhies know what's going
> on,
> and it
> > does a bit more than this description suggests, for instance it will set
> the
> > hidden attribute on mp2 and mp3 files.
> >
> > Dan
> >
> > ---
> > D.C. Crichton email: [EMAIL PROTECTED]
> > Senior Systems Analyst tel: +44 (0)121 706 6000
> > Computer Manuals Ltd. fax: +44 (0)121 606 0477
> >
> > Computer book info on the web:
> > http://computer-manuals.co.uk/
> > Want to earn money? Join our affiliate scheme!
> > http://computer-manuals.co.uk/affiliate/
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]