F-Secure Virus Descriptions : LoveLetter.BG
Information about the original VBS/LoveLetter.A is available at:
http://www.F-Secure.com/v-descs/love.shtml
The variant is similar to the original LoveLetter.A, but uses:
Subject: Ya no mas PRI
Body: Si usted es listo ya no vote por el PRI, vote por mi. Cuatemochas 2000.
Attachment: VIVE-LA-VIDA-LOCA.vbs
The commented text at the beginning of the virus code has been changed to:
barok -Mi dear tter(vbe) <i hate go to work, to school, etc...>
by: ChicoCh‚ / chico-che@mail.com / @GRAMMERSoft Group / Manila, Philippines
[Analysis: Katrin Tocheva, Mikko Hypponen, Alexey Podrezov and Sami Rautiainen, F-Secure]
|