> This virus is sent as plain text, but has a SMTP command *inside* that
> text (begin 666) which causes Outlook (on the recipient's side) to
> assume this is an attachment, and separates out the bytes into a
> attachment file, which is the actual virus executable.

Sounds to me as though the file is a uuencoded "attachment".  uuencoding
is done inline with the message body.  The uuencoding scheme is designed
to translate all characters into 7-bit text and is considered plain text
even though it isn't readable until decoded.  Most mail systems will find
this and treat it as an attachment.  "BEGIN nnn" is indicator that a
uuencoded file will be found betweent the BEGIN and END markers.

Terry A. Moore
Sr. I/S Tech Specialist
The Timken Company


**********************************************************************
This message and any attachments are intended for the
individual or entity named above. If you are not the intended
recipient, please do not read, copy, use or disclose this
communication to others; also please notify the sender by
replying to this message, and then delete it from your system.

The Timken Company
**********************************************************************