[SpamCop-List] Re: Nice info on Mydoom.B
Robi
r_buecheler at hotmail.com
Fri Jan 30 11:32:47 EST 2004
Mike Gray wrote:
>> Hmm, I see something very interesting happening here...
>>
>> http://www.f-secure.com/v-descs/mydoom_b.shtml
>
> Indeed. The hosts file thing is clever, as is the idea of an auto-updating
> virus. But if it puts microsft into the hosts and then DOSes it, surely it
> will fail because when it tries to reach Microsoft it'll just aim back at
> the local machine?
As far as I understand, it will remove the entry before DDoSing M$.
--
Robi
More information about the SpamCop-List
mailing list