[thelist] Spoofing and My Doom..... example

Ken Schaefer ken at adOpenStatic.com
Fri Jan 30 20:34:11 CST 2004


MyDoom searches through a number of different file types, including .txt and
.htm files located on the user's hard disk for email addresses (like other
viruses before it):
http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.b@mm.html

<quote.
Searches for the email addresses in the files that have the following
extensions:

  a.. .htm
  b.. .sht
  c.. .php
  d.. .asp
  e.. .dbx
  f.. .tbb
  g.. .adb
  h.. .pl
  i.. .wab
  j.. .txt
</quote>

Cheers
Ken

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "John C Bullas" <jcbullas at nildram.co.uk>
Subject: [thelist] Spoofing and My Doom..... example


: just as we were talking about spoofed outgoing addresses.......
:
: The email address below is one used for a car sale here:
:
: http://www.minimania.com/web/id/4389/ClassDetail.cfm
:
: on a well visited and spidered site :(
:
: this email address is NEVER used as an outgoing one AND the
: network and PC were turned off at the wall......
:
: FB



More information about the thelist mailing list