> and seems > to be using a dictionary of common usernames instead of > working off of a compromised address book -- yet another > reason to get rid of "nobody" aliases ;-)
As I can see it does search in adress books of infected machines. Maybe it's trying also common usernames as the multilanguage content seems to be another attempt to bring out something "creative" Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
