This variant of Email-Worm:VBS/Loveletter is distributed as an infectious e-mail file attachment.
Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.
More scanning & removal options
More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.
You may also refer to the Knowledge Base on the F-Secure Community site for more information.
This variant spreads in a message with the following content:
Subject: fwd: Joke Attachment: Joke.vbs
VBS/LoveLetter.BE@mm is quite similar with the original VBS/LoveLetter.A. This variant saves itself to the Windows System directory as "Jokes.vbs" and "Jokes.htm".
Also this variant uses a different set of extensions, so the files with the following extensions are deleted: ".js", ".zip", ".css", ".doc", ".xls" and ".htm"; and the files with following extensions are hidden: ".mp3" and ".mid". The worm creates a new file using the original file name and a ".vbs" extension for each file that it deletes or hides.
This variant does not spread via mIRC.
Description Details: F-Secure; June 2001
Technical Details: Sami Rautiainen