[LINK] Where did they get it?

[Adam Todd]

>If it finds an unsecured account on the target machine - like guest or
>administrator - it sends the info back to its source. However, instead of
>trying to use something like Outlook to "phone home", its SMTP engine
>launches the session directly. Is this a new "feature"?

Nope, quite a few of the viri from the last 18 months have had this built 
in, not to mention an IRC client that connects and dumps details into a 
logged channel.

I find them rather amusing when I read the code.  There must be a lot of 
dumb people out there.