[IP] MyDoom worm avoids Berkeley?
Delivered-To: dfarber+@xxxxxxxxxxxxxxxxxx
Date: Thu, 29 Jan 2004 20:41:45 -0800
From: Myriam Godfrey <myr@xxxxxxxxxxxxxxxxxxxxx>
Subject: MyDoom worm avoids Berkeley?
X-Sender: myr@xxxxxxxxxxxxxxxxxxxxx (Unverified)
To: dave@xxxxxxxxxx
Interesting--was just reading the description of the MyDoom worm on the
symantec site
(http://www.symantec.com/avcenter/venc/data/w32.novarg.a@xxxxxxx) and
noticed the following:
"When W32.Novarg.A@mm sends email, it avoids distributing to the domains
that contain any of the following strings:"
...
"berkeley"
-------------------------------------
You are subscribed as roessler@xxxxxxxxxxxxxxxxxx
To manage your subscription, go to
http://v2.listbox.com/member/?listname=ip
Archives at: http://www.interesting-people.org/archives/interesting-people/