MyDoom searches through a number of different file types, including .txt and .htm files located on the user's hard disk for email addresses (like other viruses before it): http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.b@mm.html <quote. Searches for the email addresses in the files that have the following extensions: a.. .htm b.. .sht c.. .php d.. .asp e.. .dbx f.. .tbb g.. .adb h.. .pl i.. .wab j.. .txt </quote> Cheers Ken ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From: "John C Bullas" <jcbullas at nildram.co.uk> Subject: [thelist] Spoofing and My Doom..... example : just as we were talking about spoofed outgoing addresses....... : : The email address below is one used for a car sale here: : : http://www.minimania.com/web/id/4389/ClassDetail.cfm : : on a well visited and spidered site :( : : this email address is NEVER used as an outgoing one AND the : network and PC were turned off at the wall...... : : FB