It also sets the search page to a search engine which is used to search for underground materials. Local Page is set to protect.htm. Note that it is nothing new in a virus disguising itself as coming from an antivirus company. This virus is of course not sent from Symantec. This is like the A variant with minor changes in the source code.
Files targeted are like the A variant.
Here's the easy way to fix the love virus. Functionally this is similar to A variant. This variant overwrites program files of types EXE and DLL instead of the JPG and JPEG file types that were overwritten by the A variant. L This is like the original A except that some comments are added to the source code. Otherwise this is identical to the A variant.