Discovered on: February 6, 2002

W32.Rexli.A@mm is a mass-mailing worm that is written in Visual Basic. When executed, the worm emails all contacts in the Microsoft Outlook address book. If mIRC is found, the worm modifies a file called Script.ini. This modification causes an infected user to send the worm to people over the IRC network.
http://www.symantec.com/avcenter/ven...exli.a@mm.html

think the folks at symantec must have a macro...

<exploitname> is a mass-mailing worm that is written in Visual Basic. When executed, the worm emails all contacts in the Microsoft Outlook address book. If mIRC is found, the worm modifies a file called <exploitmodifer>. This modification causes an infected user to send the worm to people over the IRC network.

they must get tired of it...i know i do...