Loveletter Virus Possible Infection. Need Expert Advice!!

[AcquisitiveOne]

For some reason my home email address has seemed to send the Vbs.Loveletter.CI Virus to one of my co-workers. I have Norton Antivirus 2002 running at all times with the latest virus definitions. So I have a few questions.

1.) Norton Should have stopped the virus from being able to be opened and should have logged the virus in the virus activity log. (For some reason it didn't! There is no kind of entry in my activity log.) Plus my machine scans for viruses weekly!!!

2.) I was notified today that the email was recieved and so I ran a complete virus scan on my computer with the latest virus definitions and still Norton did not find any virus infected files.

3.) The only person (email address) that has recieved the Loveletter email with the virus attachment is nowhere to be found on my computer. Meaning the email that recieved the virus email is not in my address book nor have I recieved any emails from or sent any emails to this email address before. (at least from my home email address)

I have heard of viruses that scan Outlook addresses books but this email address is not in my address book. I have also heard of viruses that scan recieved emails for email addresses but this person's email is not in any of my recieved emails either. This leads me to believe that is not my computer that is sending these email addresses but someone elses computer that is replacing the from address with my email address. I have not yet heard any complaints from people who are in my address book! Strange??? I am a Network Admin and am very skilled in stopping viruses but for some reason this one is perplexing me!!! I have not yet had time to check my registry for any wierd entries but will do so later today. Please help. Is it possible for a virus to replace the from: (line) in a virus infected email????

Thanks
Acquisitive_One, MCP Acquisitive - 1. Characterized by a strong desire to gain and possess. 2. Tending to acquire and retain ideas or information

 

[edfair]

You might want to go to the FAQ list and follow the link to one of the virus sites and get a writeup of the files involved so you can do an eyeball search. I prefer the Symantec virus encyclopedia, but it is personal choice.
This is a script file, so someone with medium skill could possibly have modified it to react differently.
Doesn't really sound like you, but who knows what has been corrupted. Ed Fair
efair@atlnet.com

Any advice I give is my best judgement based on my interpretation of the facts you supply.

Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

 

[AcquisitiveOne]

I figured it out. I sold recently sold one of my old computers to a friend and forgot to reconfigure outlook and delete my address book. He recieved since he got the virus it is sending infected emails to people who were in my old address book. Thanks for the advice though. Acquisitive - 1. Characterized by a strong desire to gain and possess. 2. Tending to acquire and retain ideas or information

 

[ChrisHirst]

Tut Tut Tut,
Selling a computer with the software still installed. What will Bill have to say about it,

Chris

 

[SteveTheGeek]

Forget Bill, what other important personal data did you leave on there? Rule#1 when selling a used PC: FDISK the hard drive.

 

[Guest_imported]

dood! I have that virus to It trashed all my jpg's I downloaed a jpg off kazaa that had the virus. MY norton could not find it and I have the latest virus definitions also.....how do I kill it

 

[Guest_imported]

i have VBS.LoveLetter.CI also.
i don't know what will happen.
help?

 

[Guest_imported]

BTW: i also know how to stop viruses, but this is plain strange. help me! F1!
my mp3's are messed up, and norton 2002 didn't help in the fight.

Thanx for your help (I hope),
TheNerds