| |
| | RAV AntiVirus - Win32/Mydoom.A@mm Virus Description (Site not responding. Last check: 2007-11-03) |
 | | The mail addresses will be first collected from the victimâs WAB file and from files from Internet Explorer cache folder if they have one of the extensions: ".txt", ".htm", ".sht", ".php", ".asp", ".dbx", ".tbb", ".adb", ".pl" and ".wab". |
 | | After this, in a separate thread, will continue to collect mail addresses from all the files from the victimâs machine if they have the above extensions. |
 | | The SMTP engine will try to use the default SMTP server address from the victimâs computer and if not succeed will try to use several combination using the domain from the mail address and the following prefixes: âgate.â, âns.â, ârelay.â, âmail1.â, âmxs.â, âmx1.â, âsmtp.â, âmail.â, âmx.â. |
| www.ravantivirus.com /virus/showvirus.php?v=205 (784 words) |
|