According to this page, the link will vary, because it is pointing back
to the infected PC.
http://www.sophos.com/virusinfo/articles/howbofrawork.html
PS This also means that the usual way to "Fix" one of these, send only
the link (no attachment) is to shut down the few hosting web sites world
Any one know what the link in the body is so we can add filters for it?
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, jus
