This MAC OSX malware may arrive as a package disguised as an iPhoto installer.
This application contains two parts, the Configurator and the Server. The Configurator is used to set the email address and the SMTP server, and that configuration will be written on the Server.
The default SMTP server on the application is smtp.wanadoo.fr, which can be found on iPhoto.app.
Analysis By: Julius Caezar R. Dizon