Welcome to the Virus Encyclopedia of Panda Security.
On certain occasions symptoms of infection will be very clear and easy to see. Besides having received an e-mail including an attachment (MY-FAREWELL-2-NEWSGROUPS.TXT.VBS), the virus overwrites all the files with TXT and DOC extensions and displays an obscene picture created with ASCII characters.Moreover, the real payload of this virus consists of the execution of the VBS/Loveletter worm. Once the virus has been executed, the worm copies itself to the Windows/System directory with the following names: MSKERNEL32.VBS and MY-FAREWELL-2-NEWSGROUPS.TXT.VBS. Additionally, it also copies itself to the Windows directory as a file called WIN32DLL.VBS.