It is using yahoo to query for more email addresses. Here is Mcafee's write up.

http://vil.nai.com/vil/content/v_127175.htm

Darrell
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.


Colbeck, Andrew writes:

Another week, another variant.

http://isc.sans.org/

Judging from possible strings in the message body and subject, this virus
uses a password protected zip (or pretends to), and pretends to be about
security, possibly faking your own domain name, just like last week.


I don't know what it's trying to do to at Yahoo!...

Andrew 8)
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to