From: Marco Cimarosti (marco.cimarosti@essetre.it)
Date: Fri Apr 23 2004 - 09:05:49 EDT
Antoine Leca wrote:
> The virus cannot have any knowledge of a language code. And
> much less of the language used by its next victim...
It sends e-mails to addresses stolen from the previous victim's address
list, so it can analyze the top-level domain of these addresses (".it",
".fr", etc.). Although, strictly speaking, these domains normally correspond
to *country* codes, they are a pretty good hint of the language of the next
victim.
_ Marco
This archive was generated by hypermail 2.1.5 : Fri Apr 23 2004 - 09:51:05 EDT