[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: Nice info on Mydoom.B

Robi r_buecheler at hotmail.com
Fri Jan 30 11:32:47 EST 2004


Mike Gray wrote:
>> Hmm, I see something very interesting happening here...
>>
>> http://www.f-secure.com/v-descs/mydoom_b.shtml
> 
> Indeed. The hosts file thing is clever, as is the idea of an auto-updating
> virus. But if it puts microsft into the hosts and then DOSes it, surely it
> will fail because when it tries to reach Microsoft it'll just aim back at
> the local machine?

As far as I understand, it will remove the entry before DDoSing M$.


-- 
Robi


More information about the SpamCop-List mailing list