MyDoom worm avoids Berkeley?

[Dave Farber <dave () farber net>]

Delivered-To: dfarber+ () ux13 sp cs cmu edu
Date: Thu, 29 Jan 2004 20:41:45 -0800
From: Myriam Godfrey <myr () socrates Berkeley EDU>
Subject: MyDoom worm avoids Berkeley?
X-Sender: myr () socrates berkeley edu (Unverified)
To: dave () farber net


> Interesting--was just reading the description of the MyDoom worm on the 
> symantec site 
> (http://www.symantec.com/avcenter/venc/data/w32.novarg.a () mm html) and 
> noticed the following:
>
> "When W32.Novarg.A@mm sends email, it avoids distributing to the domains 
> that contain any of the following strings:"
> ...
> "berkeley"


-------------------------------------
You are subscribed as interesting-people () lists elistx com
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/