This worm searches the Windows address book, the ICQ database, and local
files for email addresses. The worm sends an email message to these
addresses with itself as an attachment. The worm contains its own SMTP
engine and attempts to guess at available SMTP servers. For example, if the
worm encounters the address user_at_abc123.com it will attempt to send email
via the server smtp.abc123.com.
The subject line, message bodies, and attachment file names are random. The