[IP] MyDoom worm avoids Berkeley?

[Dave Farber <dave@farber.net>]

Delivered-To: dfarber+@ux13.sp.cs.cmu.edu
Date: Thu, 29 Jan 2004 20:41:45 -0800
From: Myriam Godfrey <myr@socrates.Berkeley.EDU>
Subject: MyDoom worm avoids Berkeley?
X-Sender: myr@socrates.berkeley.edu (Unverified)
To: dave@farber.net


> Interesting--was just reading the description of the MyDoom worm on the 
> symantec site 
> (http://www.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html) and 
> noticed the following:
>
> "When W32.Novarg.A@mm sends email, it avoids distributing to the domains 
> that contain any of the following strings:"
> ...
> "berkeley"


-------------------------------------
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/