The following summarizes eight known variants:

   ANSIR E-MAIL - National Infrastructure Protection Center (NIPC) Alert
   00-041d (LOVE-LETTER-FOR-YOU) Also known as the LOVE BUG VIRUS and
   variants;

   UPDATE as of 2000 (EST) 7 May 2000
   As of 7 May 2000, at least eleven variants of the LOVE BUG worm have
been   identified.  These variants may behave differently than the original
worm   and may impact different files.  Preliminary information on variants
is   provided below:

   A.    VBS.LoveLetter.A
         Attachment:     LOVE-LETTER-FOR-YOU.TXT.vbs
         Subject:        ILOVEYOU
         Message Body:   kindly check the attached LOVELETTER coming from me.
 
   B.    VBS.LoveLetter.B (also known as Lithuania)
         Attachment:     LOVE-LETTER-FOR-YOU.TXT.vbs
         Subject:        Susitikim shi vakara kavos puodukui...
         Message Body:   kindly check the attached LOVELETTER coming from me.
 
   C.    VBS.LoveLetter.C (also known as Very Funny)
         Attachment:     Very Funny.vbs
         Subject:        fwd: Joke
         Message Body:   (empty)
 
   D.    VBS.LoveLetter.D (also known as BugFix)
         Attachment:     LOVE-LETTER-FOR-YOU.TXT.vbs
         Subject:        ILOVEYOU
         Message Body:   kindly check the attached LOVELETTER coming from me.
 
   E.    VBS.LoveLetter.E (also known as Mother's Day)
         Attachment:     mothersday.vbs
         Subject:        Mothers Day Order Confirmation
         Message Body:   We have proceeded to charge your credit card for the
         amount of $326.92 for the mothers day diamond special. We have   attached
         a detailed invoice to this email. Please print out the attachment   and
         keep it in a safe place.  Thanks Again and  have a Happy Mothers   Day!
 
   F.    VBS.LoveLetter.F (also known as Virus Warning)
         Attachment:     virus_warning.jpg.vbs
         Subject:        Dangerous Virus Warning
         Message Body:   There is a dangerous virus circulating. Please click
         attached picture to view it and learn to avoid it.
 
   G.    VBS.LoveLetter.G (also known as Virus ALERT!!!)
   Attachment: protect.vbs
         Subject:        Virus ALERT!!!
   Message Body: (contains a lengthy message regarding the LOVE BUG Virus)
   NOTE: This email poses as a message from Symantec Technical  Support.
   "FROM support@symantec.com." This variant also overwrites files with .bat
   and .com extensions.

   H.    VBS.LoveLetter.H (also known as No Comments)
   Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
         Subject:        ILOVEYOU
   Message Body: kindly check the attached LOVELETTER coming from me.
   I.    VBS.LoveLetter.I (also known as Important! Read carefully!!)
   Attachment: Important.TXT.vbs
         Subject:        Important! Read carefully!!
         Message Body: Check the attached IMPORTANT coming from me!
         Misc Notes: A new comment line at the beginning: by BrainStorm /
   @ElectronicSouls. The virus also copies the files Eskernel32.vbs &
   ES32DLL.vbs, and MIRC script comments referring to BrainStorm and
   ElectronicSouls and sends a file Important.Htm to the chat room.
   J.  VBS.LoveLetter.J (New)   (Currently being analyzed)
   Attachment: Unknown
         Subject:        Unknown
         Message Body: Unknown
         Misc Notes: This appears to be a slight modification of the G
         variant
 
   K.    VBS.LoveLetter.K  (New)
   Attachment: Unknown
         Subject:        Unknown
         Message Body: Unknown
         Misc Notes: This appears to be a slight modification of a previous
         variant